[cisco-voip] IP Phone Spam?

Lelio Fulgenzi lelio at uoguelph.ca
Wed Dec 9 11:34:14 EST 2009


That sounds like multi-cast spam. Quite scary and quite possible. Typical access control lists prevent access to the voice VLAN, but I'm not sure how multi-cast ACLs work. In essence, someone has likely sent a multi-cast join request to the phone, then started streaming audio to that multi-cast group. If you have Informacast, then your system is enabled for that to happen. In our situation, no line keys would light up, only the speaker button and the mute button. Then a little phone icon in the bottom right of the phone display. 

Scary indeed. 


--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
"Bad grammar makes me [sic]" - Tshirt 


----- Original Message ----- 
From: "STEVEN CASPER" <SCASPER at mtb.com> 
To: "cisco-voip voyp list" <cisco-voip at puck.nether.net> 
Sent: Wednesday, December 9, 2009 11:15:19 AM GMT -05:00 US/Canada Eastern 
Subject: [cisco-voip] IP Phone Spam? 


Anybody have any idea what this might be? This is from user who has witnesses to this event and has always been reliable when it comes to reporting troubles: 

"Music began to emit from the speaker of the IP deskphone, followed by an advertisement for someone hawking software. I had not received or placed a phone call. When the voice got to the end of the advertisement, the sound disappeared and the phone functioned normally." 

There were no line keys lit and the user was unable to control the phone to get rid of the audio. We have an Informacast system but the log files indicate no broadcasts to her telephone. Could it be some sort of EMI/RFI? The user has a 7961. 

Steve 

Steve 

************************************
This email may contain privileged and/or confidential information that is intended solely for the use of the addressee.  If you are not the intended recipient or entity, you are strictly prohibited from disclosing, copying, distributing or using any of the information contained in the transmission.  If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy.  This communication may contain nonpublic personal information about consumers subject to the restrictions of the Gramm-Leach-Bliley Act and the Sarbanes-Oxley Act.  You may not directly or indirectly reuse or disclose such information for any purpose other than to provide the services for which you are receiving the information.
There are risks associated with the use of electronic transmission.  The sender of this information does not control the method of transmittal or service providers and assumes no duty or obligation for the security, receipt, or third party interception of this transmission.
************************************ 
_______________________________________________ cisco-voip mailing list cisco-voip at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20091209/b3b36f0b/attachment.html>


More information about the cisco-voip mailing list