- VoiceOps - lists.voiceops.org

STIR/SHAKEN for call centers
by patrick.labbett＠gmail.com Dec. 3, 2020

Dec. 3, 2020

Hello, I'm looking for guidance/feedback on the impact of STIR/SHAKEN on the call center and answering service industries. Very few are interconnected VoIP service providers themselves. Specifically, customers of these industries often desire the call center utilize their company phone number when contacting their employees or customers for an improved end-user experience. The worry is that STIR/SHAKEN will be implemented in a way that causes these "spoofed" calls (that have legitimate business relationships in place) to be marked as such or eventually blocked as STIR/SHAKEN tightens it's grip on malicious intent. Here is my understanding of the situation: As a customer of an Originating carrier, the Call Center's outbound calls will be signed by their Originating carrier's STIR/SHAKEN certificate - so as long as the SIP Identity header isn't modified in transit and the certificate is validated on the Terminating side, everything should continue to work normally for us as end users. So this is largely the carrier's problem, and not the call centers. However, it's not clear (to me) how the Attestation aspect of things will work (and if it even effects the typical customer): - Does just being a customer of the Originating Carrier give the Call Center's calls Full Attestation? - As a call center, if spoofing a number not owned/in inventory, would that be Partial Attestation? - Does the owner/location of the spoofed number matter, i.e. : - Partial Attestation: Number owned by Originating carrier, but not by customer making call - Gateway Attestation: Number not owned by Originating carrier (and by extension not owned by customer making the call) - Will different Terminating carriers treat Attestation designations differently? - Is this largely a framework that carriers will implement some day in the future? Am I way overthinking this? (Yes.) Thank you in advance for any perspective you can offer, or resources you can direct me to. My personal plan of attack for call centers: - Document permission and business use case for numbers spoofed on behalf of customers - That's it - that's the whole plan. - ???? Aside from making sure my carriers know I exist and that I have permission to use those numbers, what else is there? -Patrick Labbett

4 5

Verizon Wireless Porting
by voiceops＠ics-il.net Nov. 24, 2020

Nov. 24, 2020

Does anyone know where to go at Verizon Wireless to get set up for porting? My Google-fu seems to be lacking. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com

2 1

Preventing unauthorized access to SIP device config files
by ciscoplumber＠gmail.com Nov. 17, 2020

Nov. 17, 2020

For providers that have centralized SIP device management that is available on the internet how have you been protecting your configurations from unauthorized access over https? Are there any specific measures that you found most helpful? I am assuming that certificate authentication is probably the best option. For people that are doing this, are you using the factory installed certs from the hardware provider or installing your own certificates on the devices? Are there any lessons learned on using certs that you can share? Thanks

3 2

The number you have dialed is unallocated
by sean＠commandlink.com Nov. 16, 2020

Nov. 16, 2020

Getting this message through multiple carriers this morning, including through google voice? Anyone aware of issues to numbers of "Teleport Communications America, LLC" in PA? Sean

1 0

Recommendations for STIR/SHAKEN Consultants
by David.Zilk＠cdk.com Nov. 12, 2020

Nov. 12, 2020

We are looking for a consultant to assist in the process of implementing STIR/SHAKEN in our network. Has anyone used any consultants for STIR/SHAKEN that they were particularly happy with? David

3 2

606 Responses from Verizon
by David.Zilk＠cdk.com Nov. 9, 2020

Nov. 9, 2020

We are seeing about 10%-15% of outbound calls to Verizon receiving 606 responses. It appears that Verizon has a VoIP Gateway outage that they are investigating. David

1 0

Confusing Spoofing Customers
by ctaloi＠gmail.com Nov. 8, 2020

Nov. 8, 2020

Hey All, We have observed multiple reports of our business customer telephone numbers being used by a bad actor leaving messages for consumers. The consumers receiving the call do not have a direct relationship with us. The bad actor presents ?unknown? as the caller-id and leaves a harsh message asking for personal information and demanding a call back (illegal sounding collector call). The number the bad actor leaves to be called back (in a verbal message) is owned by one of our business customers. So, the response to the ?bad? call goes back to the legit company. The consumer calls our business customer back and explains the message, the business customer has no record of an outbound call to the consumer and is perplexed by the call. We have a few customers impacted by this and in every instance we have no record of the outbound (bad actor) call leaving our network. I can?t figure out the scam here, they aren?t pumping traffic and the call goes back to the legit business, leaving no opportunity for the bad actor to engage with the consumer. Anyone have any thoughts?

7 12

Intl toll free
by dovid＠telecurve.com Oct. 12, 2020

Oct. 12, 2020

Hi, Does anyone know of a route to global international toll free numbers ( https://en.wikipedia.org/wiki/Toll-free_telephone_number) ? We have clients trying to call them and we have never been issued a rate by any carrier that we have ever worked with. TIA. Dovid

2 2

Help Tracing International Call Termination
by jorge.guntanis＠ring.cr Oct. 9, 2020

Oct. 9, 2020

Hi everyone, We are a new VoIP CLEC in Costa Rica and we are having issues reaching our network from pretty much any provider in the U.S. I'm trying to get some evidence on where the communication is dying to show the ILEC here. Does someone here have access to a Tier 1 provider and could help me get an SS7 or IP trace from your network to +50646009999 ? I would greatly appreciate any help you can provide. Best, Jorge Guntanis jorge at ring.cr +506 83052920

1 0

Update on STIR/SHAKEN guidelines
by marylou＠backuptelecom.com Oct. 9, 2020

Oct. 9, 2020

Just wanted to give everyone an update on the STIR/SHAKEN certification process because I know everyone has been confused about it......including me which is pretty sad because I've spent the last 20 years helping carriers turn up their networks and get access to direct numbering resources! I spoke with the FCC, STI-GA Director and NECA to figure out where the breakdown is for those telecom companies that currently don't have direct access to numbering resources (NPA-NXXs). Since some carriers have come to me with an IPES OCN and some have been denied, my first question was "Why are some Interconnected VOIP providers that don't have an FCC Numbering Authorization being assigned IPES OCNs when others are turned down?" I found out you can get an IPES OCN without the FCC Numbering Authorization if you submit an Interconnect Agreement with your current wholesale DID provider. However, the STI-GA won't approve you for a STIR/SHAKEN certificate if you don't have the FCC Numbering Authorization. Getting an FCC Numbering Authorization is where the breakdown occurs because even though IPES providers aren't required to order their own NPA-NXXs, the FCC requires the applicant to submit an Interconnection Agreement with a PSTN connection provider to get approved. After discussing this problem with both the FCC and STI-GA, I was told they are aware of the problem this requirement poses for carriers who don't have/want their own NXXs and are working to provide an alternative method for these companies to acquire their own STIR/SHAKEN certificate. Their goal is for every company to have their own STIR/SHAKEN certificate. At this point I'm not sure if the FCC will give an exemption to these carriers or assign a different type of certification, but either way it seems every company will have to submit paperwork to the FCC to qualify for their STIR/SHAKEN certificate. In the meantime, I found out that those companies who ONLY order DIDs from a wholesale DID provider CAN use their DID provider's token IF their wholesale DID provider agrees to let them. However, know that Wholesale DID providers can just as easily get their STIR/SHAKEN token revoked. Maybe even more easily because if any of their customers get caught certifying bad traffic they are held responsible for passing that traffic. Since moving your DIDs / traffic to a new wholesale provider is not a simple or inexpensive process and getting certified yourself if not a quick process, I would recommend that this be an interim solution and not a long term fix. My suggestion for those who don't need direct access to numbering resources is to go ahead and apply for the FCC numbering authorization with your existing wholesale DID provider agreement and just explain that you only need authorization to get a STIR/SHAKEN certificate. That way the FCC has all the information they need and can determine what to assign your company. At this time, the cut off date for getting your traffic certified is still June 2021. It takes anywhere from 2-6 months to get through the certification process (depending on what you already have in place), so it's not something that you should wait until the last minute to start. Hope this helps! MARY LOU CAREY BackUP Telecom Consulting Office: 615-791-9969 Cell: 615-796-1111

2 2