- VoiceOps - lists.voiceops.org

Allworx Security Advisory
by joquendo＠e-fensive.net May 13, 2013

May 13, 2013

Unsure why some of these vendors don't join this list. One of my clients who is an Allworx reseller, passed on the advisory. www.infiltrated.net/Allworx_Service_Bulletin_Security_Advisory.pdf I may (from the security standpoint) switch things up this year (vendors on this list beware). There are so many vulnerabilities that have yet to be addressed and although I am often torn about "disclosure," I WILL GO OUT on a whim and say Allworx knew this was an issue, and likely brushed it off as it was not reported. So back to my "switching things up", to those vendors on this list, I suggest you go back to your security queues and get things in order. In these days and times, its darn right absurd for backdoor accounts, and letting security issues linger for years. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "Where ignorance is our master, there is no possibility of real peace" - Dalai Lama 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

2 1

Itw
by zavoid＠gmail.com May 12, 2013

May 12, 2013

Anyone headed to ITW this week and want to grab a Voiceops drink? Colin

1 0

Hacked Allworx PBXs
by jim.dalton＠transnexus.com May 11, 2013

May 11, 2013

One of our customers who sells SIP trunking services is getting a lot of fraudulent calls from one or more customers who have Allworx PBXs. Their understanding is that the Allworx PBX has a back door for technical support access and this has been compromised. We have not verified this information about the Allworx compromise, but we have witnessed the fraudulent calls. Does anyone have more information on this matter? Thank you, Jim Dalton TransNexus

3 2

Level3 Faulty Card Issue
by tiatia＠tcnp3.com May 11, 2013

May 11, 2013

Anyone impacted by the Level3 faulty card issue that began as a standard maintenance and has now resulted in a 10+ hours of downtime? Just looking for added information or if Level 3 released any information to the public and/or an ETA has been issued? Thank you - Li

1 0

Hairpin Call from certain PBXs - No Audio issue
by ujjval＠simplesignal.com May 10, 2013

May 10, 2013

Hi Team: Have you all seen issues with hairpin calls from PSTN? ITSP (Broadsoft/ACME)? SIP Trunk ? which in turn forwards the call back out the SIP trunk to the PSTN and there is no Audio in either direction (Transfer via Auto-attendant OR Blind ? Attended Xfer works as Media is anchored/reinitiated on PBX) Having worked on a few PBXs (Allworx, Zultys) that cause this issue on ACME/Broadsoft Sip trunk setup ? we see RTP in both direction on our traces, but due to the pass through RTP nature of this call flow, the TTL get way down to 5-6 in some cases, and that is what I believe is the issue, and our upstream vendors like Level3, Bandwidth etc suggest the same. Other than implementing a RTP repeater of sorts, I don?t see an alternative. Ideas appreciated Thx Ujjval

2 1

TN Database
by shripald＠gmail.com May 6, 2013

May 6, 2013

Hey Group, Our company is planning to move to another billing platform. one of the things we didn't really take into consideration was TN management. The platform's TN Management has much to be desired so i'm looking for either thoughts on a home grown solution or something off the shelf to manage our TN's. I guess, the pertinent information in a TN Management DB would be TN RATECENTER CUSTOMER ID CARRIER ADDRESS DETAILS PORT IN DATE ACTIVE (y or n) DL LISTING TYPE (TFN, ELS, LI, other blah blah) i think it would be easy enough to just build something but i'm wondering if i'm missing something important that wouldn't make it this easy. thanks, Shri

4 4

Testing DIDs from multiple providers
by beckman＠angryox.com May 2, 2013

May 2, 2013

As a VoIP provider of numbers, we occasionally get complaints that a number isn't working, or isn't working for specific callers. The trouble I'm having is figuring out how to automate a test for this. I've got an automated test now that makes a test call from a number known to always ring busy. When my switch sees that CallerID, it plays a busy signal and records the call in our database so I can have a record of a successful test. When the number really is broken, that test consistently fails and I have good data with which I can bug the carrier. Most VoIP termination providers use Verizon or L3 or another major provider. Often my DIDs are from them, so the calls always succeed within the network. Often Verizon and L3 are both working when the customer complains. The issue is that sometimes its a cell carrier like Sprint that doesn't route the number correctly, or even Comcast Business, though a Comcast home phone successfully called the DID. Is there any company out there that provides an API that allows me to submit a request for a test of a number and will try that DID on a bunch of carriers and report back? I suppose if you aren't the endpoint for that DID, might be hard to automate, but I have ideas. Beckman --------------------------------------------------------------------------- Peter Beckman Internet Guy beckman at angryox.com http://www.angryox.com/ ---------------------------------------------------------------------------

7 7

multi-tenant cisco
by sip.vsp.5060＠gmail.com April 23, 2013

April 23, 2013

Hi folks, Is anyone messing around with the virtualized, hosted, multi-tenant cisco offering (UCS, VMWARE, CHUC, VISION/BVSM, etc)? Thanks...

1 0

test
by sip.vsp.5060＠gmail.com April 23, 2013

April 23, 2013

ignore...

1 0

Frequented Fraud Destinations
by dthompson＠esi-estech.com April 22, 2013

April 22, 2013

Anyone out there have a list of countries that are frequented for fraud? David Thompson Network Services Support Technician (O) 858.357.8794 (F) 858-225-1882 (E) dthompson at esi-estech.com (W) www.esi-estech.com

2 1