- VoiceOps - lists.voiceops.org

Voice performance testing and simulation software
by bmx1955＠gmail.com May 16, 2013

May 16, 2013

Hello Anyone can recommend me a software-based SIP solution to enable automated periodic voice quality testing (RTP) through a VoIP network ? In short, the solution would replicate the customer experience by placing calls on-net from "TEST STATION A" to different DIDs that would each leave through different upstream TSPs and all of the DIDs would ring the same "TEST STATION B". Station "B" can either be on-net or outside and will automatically answer the call and then spit out audio (i.e.: a continuous tone), or it may also enter in a loopback mode and station "A" would simultaneously generate and also detect the presence and integrity of the tone. The solution should log every performance aspects from each test run and also send an alarm on repeated failures for either no-answers or degraded RTP quality like packet loss, jitter or even problems with the expected payload. So far I have seen products from GL communications "RTP Toolbox" that could possibly do it. : http://www.gl.com/rtptoolbox.html I would also be interested in other ways like using open source projects like Freeswitch : http://wiki.freeswitch.org/wiki/Misc._Dialplan_Tools_tone_detect I'd appreciate if you can share your experiences for those who have already done that, or simply ideas from anyone else. Thank you, M.B.

2 1

Global Crossing Auto Funds Management (AFM) system
by stagg＠vocalcloud.com May 16, 2013

May 16, 2013

Does anyone have any specific experiences with the Global Crossing now Level 3 Auto Funds Management (AFM) system failing to reject calls when you hit the lower financial limit? Wondering how many people out there have relied on the system to perform as a fail safe mechanism, only to find out that the AFM system failed to reject calls when the balance reached the minimum. I have the vibe that the system either doesn't really exist, doesn't perform as described, or the implementation teams of the past may have failed to implement new accounts using the system correctly. Thanks in advance Stagg

1 0

Parsing VoIP attacker Twitter feed
by joquendo＠e-fensive.net May 15, 2013

May 15, 2013

Sorry had to start a new thread (Thunderbird filters via MS + FreeBSD aren't playing nicely). For those wanting to parse out, this is what I would do if I had to/wanted to capture from the feed: (one liner) wget -qO - http://www.twitter.com/efensive |\ awk '/VoIP/{print $3}'|sed 's:>: :g'|awk '{print $2}' If you wanted to add to say iptables: wget -qO - http://www.twitter.com/efensive |\ awk '/VoIP/{print $3}'|sed 's:>: :g'|sort -u |\ awk '{print "iptables -A INPUT -s "$2" -j DROP"}' Which is a simple iptable rule: iptables -A INPUT -s x.x.x.x -j DROP I run something similar out of my crontabs @ 15 on the hou to parse out unique addresses. I would never bother to use REJECT since it wastes time/resources telling an attacker: "I'm REJECTING this packet" YMMV. The reasoning for grep'ing ('/VoIP/' in awk) is that every once in a while I may babble on, or post say APT (the big bad Chinese/German/Russian boogeyman) threats in my stream as well as malware related hosts/domains as well. This ensures that you only get information pertaining to VoIP based attackers. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "Where ignorance is our master, there is no possibility of real peace" - Dalai Lama 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

2 1

Looking for a SIP 48 port FXS gateway
by ssrinivasan＠telesphere.com May 15, 2013

May 15, 2013

Anybody have recommendation for a 48 port FXS gateway (SIP)? I have been using the AudioCodes series but don?t believe they have a 48 port version. *SANJAY SRINIVASAN* | *CHIEF TECHNOLOGY OFFICER* Anywhere (480) 385-7062 | Fax (480) 385-7007 | ssrinivasan at telesphere.com Telesphere | 9237 E. Via de Ventura, Ste 250 | Scottsdale, AZ 85258<http://maps.google.com/maps?f=q&q=9237%20E.%20Via%20de%20Ventura,%20Ste%202…> ** <features at telesphere.com> [image: www.telesphere.com] <http://www.telesphere.com/> [image: Facebook] <http://www.facebook.com/telesphere> [image: Twitter] <http://www.twitter.com/telesphere> [image: LinkedIn] <http://www.linkedin.com/companies/telesphere> [image: YouTube] <http://www.youtube.com/user/telesphere> This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Although the company has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Telesphere.

3 2

Interesting lead on international fraud
by paul＠timmins.net May 14, 2013

May 14, 2013

I've seen a lot of my fraud calls start with numbers on this website and then move to other ones. http://www.world-premium-telecom.com/index.php?type=static_page&page=about I think these people are the genesis of a whole lot of international fraud. Thoughts? Ideas? -Paul

9 10

Allworx Security Advisory
by joquendo＠e-fensive.net May 13, 2013

May 13, 2013

Unsure why some of these vendors don't join this list. One of my clients who is an Allworx reseller, passed on the advisory. www.infiltrated.net/Allworx_Service_Bulletin_Security_Advisory.pdf I may (from the security standpoint) switch things up this year (vendors on this list beware). There are so many vulnerabilities that have yet to be addressed and although I am often torn about "disclosure," I WILL GO OUT on a whim and say Allworx knew this was an issue, and likely brushed it off as it was not reported. So back to my "switching things up", to those vendors on this list, I suggest you go back to your security queues and get things in order. In these days and times, its darn right absurd for backdoor accounts, and letting security issues linger for years. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "Where ignorance is our master, there is no possibility of real peace" - Dalai Lama 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

2 1

Itw
by zavoid＠gmail.com May 12, 2013

May 12, 2013

Anyone headed to ITW this week and want to grab a Voiceops drink? Colin

1 0

Hacked Allworx PBXs
by jim.dalton＠transnexus.com May 11, 2013

May 11, 2013

One of our customers who sells SIP trunking services is getting a lot of fraudulent calls from one or more customers who have Allworx PBXs. Their understanding is that the Allworx PBX has a back door for technical support access and this has been compromised. We have not verified this information about the Allworx compromise, but we have witnessed the fraudulent calls. Does anyone have more information on this matter? Thank you, Jim Dalton TransNexus

3 2

Level3 Faulty Card Issue
by tiatia＠tcnp3.com May 11, 2013

May 11, 2013

Anyone impacted by the Level3 faulty card issue that began as a standard maintenance and has now resulted in a 10+ hours of downtime? Just looking for added information or if Level 3 released any information to the public and/or an ETA has been issued? Thank you - Li

1 0

Hairpin Call from certain PBXs - No Audio issue
by ujjval＠simplesignal.com May 10, 2013

May 10, 2013

Hi Team: Have you all seen issues with hairpin calls from PSTN? ITSP (Broadsoft/ACME)? SIP Trunk ? which in turn forwards the call back out the SIP trunk to the PSTN and there is no Audio in either direction (Transfer via Auto-attendant OR Blind ? Attended Xfer works as Media is anchored/reinitiated on PBX) Having worked on a few PBXs (Allworx, Zultys) that cause this issue on ACME/Broadsoft Sip trunk setup ? we see RTP in both direction on our traces, but due to the pass through RTP nature of this call flow, the TTL get way down to 5-6 in some cases, and that is what I believe is the issue, and our upstream vendors like Level3, Bandwidth etc suggest the same. Other than implementing a RTP repeater of sorts, I don?t see an alternative. Ideas appreciated Thx Ujjval

2 1