<div>Yes , exactly I was told the same thing and customer is facing a huge bill.<br><br> </div>
<div><span class="gmail_quote">On 6/6/08, <b class="gmail_sendername">Kelemen Zoltan</b> <<a href="mailto:keli@carocomp.ro">keli@carocomp.ro</a>> wrote:</span></div>
<div><span class="gmail_quote"></span> </div>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">I had bitten this bullet in January ( <a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/pipermail/cisco-voip/2008-January/029569.html" target="_blank">https://puck.nether.net/pipermail/cisco-voip/2008-January/029569.html</a> ) and I'm still perplexed how can Cisco leave this as-is with SIP and H.323 wide open for public as default settings, while being well aware of the situation and it's possible consequences.<br>
<br>I've been discussing this issue with some other colleagues as well in the branch and I know this has happened to plenty of other people, in some case causing very serious monetary damage.<br><br>regards,<br> Zoltan<br>
<br>Aman Chugh wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">It was SIP , disabled sip on the wan port using an ACL to stop calls going out.<br> Aman<br><br> On 6/6/08, *James Edmondson* <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:biged7600@gmail.com" target="_blank">biged7600@gmail.com</a> <mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:biged7600@gmail.com" target="_blank">biged7600@gmail.com</a>>> wrote:<br>
<br> Do you happen to have custom scripts on the CME box? I had this<br> problem as whoever developed the script left the hole open to dial<br> anynumber from the AA. <br> On Thu, Jun 5, 2008 at 2:31 PM, Jorge L. Rodriguez Aguila<br>
<<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:jorge.rodriguez@netxar.com" target="_blank">jorge.rodriguez@netxar.com</a> <mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:jorge.rodriguez@netxar.com" target="_blank">jorge.rodriguez@netxar.com</a>>><br>
wrote:<br><br> I would recommend that you do Two things immediately. Install<br> COR to limit calls and second implement Access List to Kill<br> H.323 coming from the internet.<br><br> <br> Jorge<br>
<br> <br> *From:* <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a><br> <mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>><br>
[mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a><br> <mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>>] *On Behalf Of<br>
*Aman Chugh<br> *Sent:* Thursday, June 05, 2008 2:13 PM<br> *To:* cisco voip<br> *Subject:* [cisco-voip] has anyone seen this !<br><br> <br> <br> <br> I have a site with CME and CUE , the internet link is also<br>
terminated on my CME router, apparently some one has hacked<br> into the router and is using the router calling numbers in<br> cuba and somalia. This has caused a huge bill from the phone<br> company.We have TAC case openned for this, When we shut the<br>
internet link this stops .<br><br> <br> Aman<br><br><br> _______________________________________________<br> cisco-voip mailing list<br> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a> <mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br>
<a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br><br><br><br> -- James<br>
_______________________________________________<br> cisco-voip mailing list<br> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a> <mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br>
<a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br><br>------------------------------------------------------------------------<br>
<br>_______________________________________________<br>cisco-voip mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br> <br></blockquote><br></blockquote>
<br>