Results 1 to 3 of 3

Thread: New SIP intrusion detection in latest firmwares

  1. #1

    Default New SIP intrusion detection in latest firmwares

    The behaviour of latested firmware has changed regarding SIP intrusion
    the detected intrusions are dropped, but the ip adress of hacker is no more copied in the blocked ip adress list of the firewall

    can you tell us more about these security features

    thanks
    Henri

  2. #2

    Default

    Your observation is correct. In the latest firmware versions an additional security measure is added to SIP IDS. If the SIP IDS is enabled, the inbound SIP messages are being scanned and dropped if they contain fields having relation to well known VoIP hacking programs. In this case the IP address of the source is not added to the blocked IP list to save space in that table. The SIP packets from non well-known sources are being handled as before with adding IPs to the blocked list if intrusion detected.

  3. #3

    Default

    Thanks for this highlight
    Henri

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Inconsistent CallerID detection on analog line
    By malcolmct in forum Troubleshooting and Problems
    Replies: 7
    Last Post: 02-16-2012, 08:03 PM
  2. IDS intrusion alerts from blocked IP
    By afuchs in forum Troubleshooting and Problems
    Replies: 4
    Last Post: 11-18-2011, 12:10 PM
  3. Intrusion alert on FXO Gateway
    By sjanssen in forum Troubleshooting and Problems
    Replies: 2
    Last Post: 05-16-2011, 04:00 PM
  4. 6L latest Firmware - not Keymode
    By KSComs in forum Troubleshooting and Problems
    Replies: 2
    Last Post: 12-03-2010, 11:45 AM
  5. [Question] STUN port detection and Failed port
    By Celestix in forum Troubleshooting and Problems
    Replies: 6
    Last Post: 02-25-2010, 11:28 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •