Results 1 to 2 of 2

Thread: Extension Ringing every 20 mins

  1. #1

    Default Extension Ringing every 20 mins

    Our client is complaining that her extension is ringing every 20 mins. by an extension that is not registered in the server.

    Somebody know what's going on with our server?

  2. #2

    Default

    It seems your device is under attack. Please follow up the steps below to enhance the security on your device.

    1. Have a look in the Call History for the IP address of the caller (who is not registered on your server) and see if his IP is already in the Blocked IP List in Firewall section, if no then add it manually.

    2. Enable firewall and put the level "Medium" or "High"; Medium Security - Traffic originating from the LAN side may pass to WAN and traffic(that is not explicitly allowed in custom filtering rules) from the WAN side will be blocked.
    High Security - Everything that is not explicitly allowed will be blocked, including traffic from the LAN to WAN and vice versa.

    3. Restrict "SIP Access" to some trusted IP addresses only (for example allow SIP access to ITSPs IP addresses).
    By default "SIP Access" is allowed for any IP, this must be properly reconfigured. If Firewall is disabled or set to "Low" level, adding allowed SIP hosts will have no sense.

    4. Change the default SIP port as most SIP attacks are being lunched on default SIP port.
    You can change the default SIP port from the "Telephony-->SIP " page, but please note that changing SIP port of PBX will initiate reboot of provisioned SIP phones to let them download new configuration file containing new SIP port of the PBX. If you have also phones registered on the PBX as other, then you will need to login to the GUI of that phones and change the SIP port of PBX/server to the new one so that the phone can get registered again.

    5. SIP IDS must be enabled(by default it is enabled); SIP IDS is a mechanism to automatically detect SIP hacking attempts and add the source IP address of the hacker into the "Blocked IP" list of the firewall. Firewall must be enabled so that "Blocked IP" list works.If firewall is disabled - this will have no sense.

    6. Put the source filter of all outbound call routing rules to "PBX". PBX means that only users registered on IP lines of the PBX are able to place calls through this rule.
    If the source filter of the rule is "Any" it means that hacker can send an "Invite" to the PBX(without getting registered on an IP line) and if the destination number matches with the outbound rule then the call will be sent through.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Many Extension Ringing MAX is 13 not 16
    By davidreddington in forum Troubleshooting and Problems
    Replies: 12
    Last Post: 05-16-2014, 08:49 PM
  2. Many Extension Ringing issue
    By tilefono in forum Troubleshooting and Problems
    Replies: 0
    Last Post: 12-03-2013, 10:22 AM
  3. Many extension ringing after 5pm... This can be done?
    By Glennchot in forum General Discussions
    Replies: 1
    Last Post: 08-20-2013, 11:16 PM
  4. Many extension ringing
    By ayenacom in forum 'How Do I' Questions
    Replies: 16
    Last Post: 03-30-2009, 12:44 PM
  5. Remote extension not ringing
    By mountrcg in forum Troubleshooting and Problems
    Replies: 12
    Last Post: 07-10-2008, 04:00 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •