[VoiceOps] Broadsoft SIP Trunks and ILD Fraud

[Zak Rupas]

Mark



All of SIP trunk customer have to Registers on the network. It’s a
requirement we adopted some time ago. I also just checked and Bursting is
disabled on my latest account that had the issue. The had 5 SIP trunks but
were averaging 20 CC ILD calls. So we may have encountered a Broadsoft bug.
I am working on trying to come up with a plan for testing?



Zak Rupas
VoIP Engineer

*SimpleSignal*
3600 S Yosemite Suite 150

Denver, CO 80237
One Number Rings All My Phones: 303-242-8606

SimpleSignal.com <http://www.simplesignal.com/> |
Blog<http://www.simplesignal.com/blog>|
Facebook <http://www.facebook.com/SimpleSignal?ref=ts> |
Twitter<http://twitter.com/simplesignal>



*From:* Mark Holloway [mailto:mh at markholloway.com]
*Sent:* Friday, December 30, 2011 10:38 AM
*To:* Zak Rupas
*Cc:* voiceops at voiceops.org
*Subject:* Re: [VoiceOps] Broadsoft SIP Trunks and ILD Fraud



The IP PBX (or on-prem SBC) should be registering to Broadworks using the
Pilot number.  The SBC in your core will only allow SIP Invites from the
registered device.  If you have non-registered SIP Trunks in Broadworks
this is very dangerous.





On Dec 30, 2011, at 9:36 AM, Zak Rupas wrote:



Good Morning Voice OPS



Is anyone else experiencing anything like this? If so please share what you
have done / or will to make it stop



We have a series of smaller SIP trunk customers using Broadsoft trunk
groups. By design the trunk groups have a concurrent call limitation based
off the customer’s order. These smaller SIP trunks groups when compromised
are able to run up HUGE fraud bills even tho they only have 5 or 6 SIP
trunks. Needing to know if anyone else is seeing this that has Broadsoft
and what was done to protect yourselves?



Otherwise Happy NYE J



Zak Rupas
VoIP Engineer

*SimpleSignal*
3600 S Yosemite Suite 150

Denver, CO 80237
One Number Rings All My Phones: 303-242-8606

<image001.png>

SimpleSignal.com <http://www.simplesignal.com/> |
Blog<http://www.simplesignal.com/blog>
 | Facebook <http://www.facebook.com/SimpleSignal?ref=ts> |
Twitter<http://twitter.com/simplesignal>



_______________________________________________
VoiceOps mailing list
VoiceOps at voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20111230/16b3136c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 25162 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20111230/16b3136c/attachment-0001.png>