[VoiceOps] Ghost calls - Sipvicious?

[Keith Croxford]

Try this -

*Polycom -*

Add this to your config file. This will cause the phone to respond with a
'400 bad request' unless the INVITE comes from the registrar.

voIpProt.SIP.requestValidation.1.request="INVITE" voIpProt.SIP.
requestValidation.1.method="source"


*Adtran  (Only applies to the local SIP stack (voice users, trunks etc) )  *

Add an ACL, which only lists your proxy/SBC IPs

ip access-list standard my-proxy
 remark MY IP SPACE
 permit  x.x.x.x  y.y.y.y log

!Apply the ACL as a sip access-class
ip sip access-class my-proxy in


On Tue, Nov 12, 2013 at 4:37 PM, Jay Hennigan <jay at west.net> wrote:

> We operate a hosted VoIP platform using Broadworks and over 90% Polycom
> phones.  We have a number of customers at diverse locations recently
> reporting dead-air calls.  These typically come from a source ANI of 100
> or 7070 and have no audio.
>
> Most of the phones are behind Adtran TA900 series IADs with NAT and a
> SIP access list allowing only our own SBCs.
>
> The calls don't show up in our SBC logs, nor do they show in the MOS
> graphs on the Adtran voice quality monitoring.
>
> Any ideas or suggestions on what is causing this or how to stop it?
>
> --
> --
> Jay Hennigan - CCIE #7880 - Network Engineering - jay at impulse.net
> Impulse Internet Service  -  http://www.impulse.net/
> Your local telephone and internet company - 805 884-6323 - WB6RDV
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20131112/bbeebce3/attachment.html>