<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
..shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PostalCode"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="Street"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="address"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Problem is that IP blue is not making any
connection or call dialog with CallManager itself, it is the gateway that is
being requested directly. CallManager never knows that the call is being made.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Aman Chugh
[mailto:aman.chugh@gmail.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Monday, September 18, 2006
11:22 AM<br>
<b><span style='font-weight:bold'>To:</span></b> Matt Slaga (US)<br>
<b><span style='font-weight:bold'>Cc:</span></b> Johan Bloemhard;
cisco-voip@puck.nether.net<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [cisco-voip] H.323
Gateway Security - Prevent Unauthorized Usage</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>You could also try to block this particular subnet/IP address (IP BLUE)
to communicate with Callmanager on TCP port 1720,1719 using a extended
ACL.<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Aman<br>
<br>
<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><span class=gmailquote><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>On 9/18/06, <b><span style='font-weight:bold'>Matt
Slaga (US)</span></b> <<a href="mailto:Matt.Slaga@us.didata.com">Matt.Slaga@us.didata.com</a>>
wrote:</span></font></span> <o:p></o:p></p>
<div>
<div vlink=purple link=blue>
<div>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'>ACLs on the router specifying H323 control traffic to/from
the callmanager servers (and gatekeepers if applicable) would be all that is
needed to prevent this. </span></font><o:p></o:p></p>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'> </span></font><o:p></o:p></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center>
</span></font></div>
<p><b><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma;
font-weight:bold'>From:</span></font></b><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'> <a
href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>
[mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b><span style='font-weight:bold'>On Behalf Of </span></b>Johan Bloemhard<br>
<b><span style='font-weight:bold'>Sent:</span></b> Monday, September 18, 2006
10:06 AM<br>
<b><span style='font-weight:bold'>To:</span></b> <a
href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b><span style='font-weight:bold'>Subject:</span></b> [cisco-voip] H.323
Gateway Security - Prevent Unauthorized Usage</span></font><o:p></o:p></p>
</div>
</div>
<div><span id="q_10dc163379390a32_1">
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> <o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>We
have a 2801 with a H.323 gateway (PSTN). I just came across a student
that was using IP Blue (VTGO) on their handheld and had configured it using our
H.323 gateway. I imagine that he got the IP of the H.323 gateway off of a
phone. Obviously he didn't have internal dialing but could dial out with
a problem.</span></font><o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font><o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>How
can we prevent this? ACLs on the 2801? How are other organizations
tackling this problem?</span></font><o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font><o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>TIA</span></font><o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> </span></font><o:p></o:p></p>
<p><font size=1 face=Verdana><span style='font-size:7.5pt;font-family:Verdana'>Johan
Bloemhard <br>
Senior Information Technology Specialist <br>
___________________________________ <br>
<st1:place w:st="on"><st1:PlaceName w:st="on"><strong><b><font face=Verdana><span
style='font-family:Verdana'>Silver</span></font></b></strong></st1:PlaceName><strong><b><font
face=Verdana><span style='font-family:Verdana'> <st1:PlaceType w:st="on">Falls</st1:PlaceType>
<st1:PlaceType w:st="on">School District</st1:PlaceType></span></font></b></strong></st1:place><strong><b><font
face=Verdana><span style='font-family:Verdana'> 4J</span></font></b></strong> <br>
<st1:address w:st="on"><st1:Street w:st="on">802 Schlador Street</st1:Street> <br>
<st1:City w:st="on">Silverton</st1:City>, <st1:State w:st="on">OR</st1:State> <st1:PostalCode
w:st="on">97381</st1:PostalCode></st1:address> <br>
w: 503.873.6331 </span></font><o:p></o:p></p>
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> <o:p></o:p></span></font></p>
</div>
</div>
</div>
</span>
<div><span id="q_10dc163379390a32_3">
<div class=MsoNormal align=center style='text-align:center'><span class=e><font
size=2 color=black face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma;
color:black'>
<hr size=2 width="100%" noshade color="#aca899" align=center>
</span></font></span></div>
<p class=MsoNormal><strong><b><font size=2 color=black face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;color:black'>Disclaimer</span></font></b></strong><span
class=e><font size=2 color=black face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;color:black'>: This message may be legally privileged and/or
is intended only for the use of the addressee(s). The content and views
expressed in this email may represent the views of the sender and not those of <st1:place
w:st="on"><st1:PlaceName w:st="on">Silver</st1:PlaceName> <st1:PlaceType w:st="on">Falls</st1:PlaceType>
<st1:PlaceType w:st="on">School District</st1:PlaceType></st1:place>. </span></font><o:p></o:p></span></p>
</div>
<font size=3 face="Times New Roman"><span style='font-size:12.0pt;font-family:
"Times New Roman"'></span></span></font>
<div>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=1 width="100%" align=center>
</span></font></div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p><b><font size=3 face="Times New Roman"><span style='font-size:12.0pt;
font-weight:bold'><br>
<strong><b><font face="Times New Roman">Disclaimer:</font></b></strong><br>
<br>
<strong><b><font face="Times New Roman">This e-mail communication and any
attachments may contain</font></b></strong><br>
<strong><b><font face="Times New Roman">confidential and privileged information
and is for use by the</font></b></strong><br>
<strong><b><font face="Times New Roman">designated addressee(s) named above
only. If you are not the </font></b></strong><br>
<strong><b><font face="Times New Roman">intended addressee, you are hereby
notified that you have received</font></b></strong><br>
<strong><b><font face="Times New Roman">this communication in error and that
any use or reproduction of</font></b></strong><br>
<strong><b><font face="Times New Roman">this email or its contents is strictly
prohibited and may be</font></b></strong><br>
<strong><b><font face="Times New Roman">unlawful. If you have received this
communication in error, please </font></b></strong><br>
<strong><b><font face="Times New Roman">notify us immediately by replying to
this message and deleting it</font></b></strong><br>
<strong><b><font face="Times New Roman">from your computer. Thank you.</font></b></strong></span></font></b><o:p></o:p></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a>
<br>
<br>
<o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>
<HTML><BODY><P><hr size=1></P><br>
<P><STRONG><br>
Disclaimer:<br>
<br>
This e-mail communication and any attachments may contain<br>
confidential and privileged information and is for use by the<br>
designated addressee(s) named above only. If you are not the<br>
intended addressee, you are hereby notified that you have received<br>
this communication in error and that any use or reproduction of<br>
this email or its contents is strictly prohibited and may be<br>
unlawful. If you have received this communication in error, please<br>
notify us immediately by replying to this message and deleting it<br>
from your computer. Thank you.<br>
</STRONG></P></BODY></HTML>