<div dir="ltr">This is really damn easy to hack into the h323 or mgcp gateway.<br><br>I setup a system where I have seen that the H323 gateway was on a real IP address and it wasn't bind on any interface so by default it was binded on the serial0/0. serial 0/0 interface was public interface. So h323 registration and other stuffs didn't have any security on. <br>
So anybody can register a gateway and start routing the calls.<br><br>recently I did a few audits and found most of them didn't have a clue of voip gatewaay opened for public registration.<br><br>Thats what happened to FEMA voicemail system.<br>
<br>This also could be that the contractor was involved in doing fraude. there is a website wher eyou can sell these minutes. All u need to tell those website is just ip addrss of the gateway /port and thats all. You will get your commission for letting those craps know that there is a hole in the voip system.<br>
<br><br>-- <br>Smile, you'll save someone else's day!<br>Frog<br><br><br>
</div>