May 2016 - VoiceOps - lists.voiceops.org

IPv6 security defaults
by abalashov＠evaristesys.com May 11, 2016

May 11, 2016

This isn't overtly related to voice, but thought I would pose it here anyway in the context of SIP exploits: Lots of dedicated servers and cloud servers from major providers are now spun up with IPv6 enabled by default, but I have yet to see an instance where firewall rules for IPv6 were enabled by default. So, while it is typical for major Linux distributions (e.g. CentOS) to ship with a conservative-ish 'iptables' ruleset applied by default, I normally see: -- root at server:~# ip6tables -L -n Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination -- And yes, the canonical default services listen on the 6-net, too: -- root at server:~# ss -6tln | awk '{print $4}' Local ::1:53 :::22 ::1:953 -- With something like ~10% (?) of Internet traffic passing over IPv6 now (right?), my expectation would be that script kiddie tools, dictionary scanners, and the likes of SIPvicious would have evolved to exploit the fact that IPv6 is often enabled but, in my experience, seldom firewalled. Does this accord with your experience? Anecdotes welcome. -- Alex -- Alex Balashov | Principal | Evariste Systems LLC 1447 Peachtree Street NE, Suite 700 Atlanta, GA 30309 United States Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

1 0

Centrex Nodes
by erik＠eespro.com May 11, 2016

May 11, 2016

Hey, Does anyone know of any remote nodes or mini PBX that can run Centrex phones but essential connect to a PRI? Thanks, Erik F CONFIDENTIALITY NOTICE This e-mail message, including any attachments from EESPRO.com - contain information which is CONFIDENTIAL AND/OR LEGALLY PRIVILEGED. The information is intended only for the use of the individual named above and may not be disseminated to any other party without written permission. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, disclosure, distribution, copying or taking of any action in reliance on the contents of this e-mailed information is strictly prohibited. If you have received this transmission in error, please immediately notify info at eespro.com, and permanently delete this e-mail and the attachments hereto, if any, and destroy any printout thereof.

2 4

Best Onsite Appliance PBX, Best Cloud PBX
by erik＠eespro.com May 10, 2016

May 10, 2016

Ok Ok I know this will ruffle some feathers on the board, but what's you ladies and gents best onsite and cloud pbx system. Let me define cloud as a UC or Software based switch running a non specific provider based appliance. (meaning their sticker isn't on the outside of the box) Best Freeware: Asterisk Best Onsite Appliance PBX: Been so long for me since I'm hosting everything Best Cloud PBX: I've been using porta-one via another provider for a few years. Let's see where this goes. :-) Erik F

4 3

SMS-800
by peeip989＠gmail.com May 9, 2016

May 9, 2016

Hey gang, We currently use a software product called 8MS (http://www.csfcorp.com/products/8ms/) as our interface into SMS-800. Besides the native SMS interface, does anyone use competing products? Opinions?

2 1

Level3
by peeip989＠gmail.com May 9, 2016

May 9, 2016

Anyone see a bump from Level3 around 15:09 Eastern? We saw a bunch of circuits go down which was then followed by complaints of call quality issues (we use them for TDM access, IP, and PSTN IP-gateway). Downdetector (for what it's worth) shows correlation, but so do a bunch of others so this may have been bigger than just Level3. Thanks, Pete

1 0

Recording Audio for Troubleshooting
by peter.w.fabian＠gmail.com May 7, 2016

May 7, 2016

I know that many providers capture voice traffic (RTP) for troubleshooting purposes, despite the various privacy laws that are in place against wiretapping. We are planning to have a legal review of our rights and responsibilities regarding this practice. In preparation for that, I want to identify what regulations are being cited in defense of being able to capture and review this traffic? What restrictions do people follow when doing these captures? Are limited retention times enforced? Assuming that a justification for initiating the capture is required, what qualifies, and do you need to retain records of the justification? We are located in the US and only provide services to US customers, so rules relevant to operation in the United States are what I am interested in. We will obviously look to our own legal counsel for direction, and not take any information provided here as legal advise. Thanks Pete

4 4

Anyone from Bell Canada (landline) on the list?
by ivan.kovacevic＠startelecom.ca May 6, 2016

May 6, 2016

Troubleshooting an RLT issue for a client and would like to short-cut the usual Tier1, Tier2, Tier3 dance, since most of the low level techs don?t know RLT from a BLT (sandwich). Thx. Best Regards, Ivan Kovacevic Vice President, Client Services Star Telecom | www.startelecom.ca | SIP Based Services for Contact Centers

2 1

CLEC - separate legal entity per State?
by ryan＠finnesey.com May 4, 2016

May 4, 2016

When filling for CLEC status is it still common place to form a separate legal entity per State? Cheers Ryan

2 4

CLEC - SIP handoff from the LECs
by ryan＠finnesey.com May 2, 2016

May 2, 2016

Good Evening Is it possible for a CLEC to get a SIP handoff from the LECs or is TDM still requested? Cheers Ryan

8 12

CLEC - SIP handoff from the LECs
by ryan＠finnesey.com May 1, 2016

May 1, 2016

Yes I do think there will be an opportunity to partner with CLECs and also deploy our own network. In the end I think it will be a bit of a hybrid. For the fax service we would like to use are own NXXs But one area I see opportunity to work with CLECs is around Office 365. The local CLEC can provide SIP and network connectivity. We developed an appliance that would enable hosted PBX services to run out of the Office 365 data centers but the voice traffic be routed to the CLEC. I would think a win win. Cheers Ryan From: admin at wiphonica.com [mailto:admin at wiphonica.com] On Behalf Of Naushit Sakarvadia Sent: Thursday, April 28, 2016 10:15 AM To: Ryan Finnesey <ryan at finnesey.com> Subject: CLEC - SIP handoff from the LECs Hi Ryan, Short answer is Yes. ILEC interconnect still require plain old TDM . But you can partner with other CLECs like us to share cost of TDM connectivity, without committing to investment in TDM switch and transport. Thanks, Naush Good Evening Is it possible for a CLEC to get a SIP handoff from the LECs or is TDM still requested? Cheers Ryan _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org<mailto:VoiceOps at voiceops.org> https://puck.nether.net/mailman/listinfo/voiceops

1 0