HUDlite 1.1.1170 making calls on it's own?

dgzag
Posts: 3
Member Since:
2006-12-30

Hello. I was reviewing calls today and noticed that from ext 201 (my HUDlite extension) there was a long distance call for 11 seconds. This has me very worried that someone is hacking into my system. At the same time on my firewall, I see a connection from a Virginia IP residential address.

Does HUDlite in anyway make calls on it's own? Is there a way someone can remote into my system and make a call? I'm running Trixbox 2.6.2.3.

Any advice would be appreciated.

Thanks,
Dan



dgzag
Posts: 3
Member Since:
2006-12-30
logs

Here is a line in my Trixbox log. It appears that 89.42.99.76 registered 201!

[Mar 10 16:19:28] VERBOSE[2379] logger.c: -- Registered SIP '201' at 89.42.99.76 port 40700 expires 3600

What steps can I take to prevent someone from the outside of my network from registering phones?!

Dan



SkykingOH
Posts: 9541
Member Since:
2007-12-17
Quote: What steps can I take
Quote:
What steps can I take to prevent someone from the outside of my network from registering phones?!

Don't put a public IP on the trixbox without securing it properly.

Read the countless security posts for tips on proper security procedures.

--

Scott

aka "Skyking"



dgzag
Posts: 3
Member Since:
2006-12-30
My Trixbox doesn't have a Public IP

My Trixbox doesn't have a public IP. I also see from my firewall the connection was originated from my VoIP provider's IP, but Trixbox shows it was from a different IP. I'll read the countless security posts for proper security procedures.

Thanks.
Dan



Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.