We have 16.0 in production and 16.0 and 17sp4 in lab.<div><br></div><div><br><br><div class="gmail_quote">On Fri, Dec 30, 2011 at 12:43 PM, Zak Rupas <span dir="ltr"><<a href="mailto:zak@simplesignal.com">zak@simplesignal.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I just looked at my latest victims profile and Bursting is disabled. What version Broadworks do you run?</span></p>
<div class="im">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:17.5pt;font-family:"Arial","sans-serif";color:#1f497d">Zak Rupas</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><br>
</span><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#1f497d">VoIP Engineer<br><br><b>SimpleSignal</b><br>3600 S Yosemite Suite 150</span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#1f497d">Denver, CO 80237<br>
One Number Rings All My Phones: <a href="tel:303-242-8606" value="+13032428606" target="_blank">303-242-8606</a></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><img width="252" height="91" src="cid:image001.png@01CCC6DF.D74742C0"></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><a href="http://www.simplesignal.com/" target="_blank">SimpleSignal.com</a> | <a href="http://www.simplesignal.com/blog" target="_blank">Blog</a> | <a href="http://www.facebook.com/SimpleSignal?ref=ts" target="_blank">Facebook</a> | <a href="http://twitter.com/simplesignal" target="_blank">Twitter</a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p></div><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> PE [mailto:<a href="mailto:peeip989@gmail.com" target="_blank">peeip989@gmail.com</a>] <br>
<b>Sent:</b> Friday, December 30, 2011 10:39 AM</span></p><div><div class="h5"><br><b>To:</b> Zak Rupas<br><b>Cc:</b> <a href="mailto:voiceops@voiceops.org" target="_blank">voiceops@voiceops.org</a><br><b>Subject:</b> Re: [VoiceOps] Broadsoft SIP Trunks and ILD Fraud</div>
</div><p></p><div><div class="h5">
<p class="MsoNormal"> </p><div><p class="MsoNormal">Do you have bursting allowed? I've never seen it allow more than what is configured.</p></div><div><p class="MsoNormal"> </p></div><p class="MsoNormal" style="margin-bottom:12.0pt">
</p><div><p class="MsoNormal">On Fri, Dec 30, 2011 at 12:30 PM, Zak Rupas <<a href="mailto:zak@simplesignal.com" target="_blank">zak@simplesignal.com</a>> wrote:</p><div><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">My question still lingers tho. Thanks for the insight! But the million dollar question is how are they getting around Broadsoft’s Concurrent model for SIP trunks? For example I have a 5 user SIP trunk group in Broadsoft. It limits them to only 5 calls domestically, however when the fraud starts they move up to 20 or more concurrent calls for ILD. How is that happening? </span><span style="font-size:11.0pt;font-family:Wingdings;color:#1f497d">J</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> Broadsoft should be able to limit the concurrent calls per design</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I am starting testing on a 1 Concurrent SIP trunk call group and will pass ILD calls to see if it gets around the limitation. I’ll let you know what I located</span></p>
<div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:17.5pt;font-family:"Arial","sans-serif";color:#1f497d">Zak Rupas</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><br>
</span><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#1f497d">VoIP Engineer<br><br><b>SimpleSignal</b><br>3600 S Yosemite Suite 150</span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#1f497d">Denver, CO 80237<br>
One Number Rings All My Phones: <a href="tel:303-242-8606" target="_blank">303-242-8606</a></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><img border="0" width="252" height="91" src="cid:image001.png@01CCC6DF.D74742C0"></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><a href="http://www.simplesignal.com/" target="_blank">SimpleSignal.com</a> | <a href="http://www.simplesignal.com/blog" target="_blank">Blog</a> | <a href="http://www.facebook.com/SimpleSignal?ref=ts" target="_blank">Facebook</a> | <a href="http://twitter.com/simplesignal" target="_blank">Twitter</a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p></div><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> PE [mailto:<a href="mailto:peeip989@gmail.com" target="_blank">peeip989@gmail.com</a>] <br>
<b>Sent:</b> Friday, December 30, 2011 10:07 AM<br><b>To:</b> Zak Rupas<br><b>Cc:</b> <a href="mailto:voiceops@voiceops.org" target="_blank">voiceops@voiceops.org</a><br><b>Subject:</b> Re: [VoiceOps] Broadsoft SIP Trunks and ILD Fraud</span></p>
<div><p class="MsoNormal"> </p><p class="MsoNormal">Zak, this occurs because their PBX (to which the trunks are connected) gets hacked?</p><div><p class="MsoNormal"> </p></div></div><div><div><p class="MsoNormal">
The first step is to block International unless the customer requires it. You can set maximum call duration, but that is only an inconvenience to the hackers to make them dial again. You can try to get the customers to use account codes for International. You can set time schedules (this might be tricky and may need to do in the NS). And you need a fraud detection system to alert you when it happens so that you can minimize the damage. Last but not least, you can try and make the customer pay for the usage (that never works).</p>
<div><p class="MsoNormal"> </p></div><div><p class="MsoNormal"> </p></div></div><div><p class="MsoNormal" style="margin-bottom:12.0pt"> </p><div><div><p class="MsoNormal">On Fri, Dec 30, 2011 at 11:36 AM, Zak Rupas <<a href="mailto:zak@simplesignal.com" target="_blank">zak@simplesignal.com</a>> wrote:</p>
</div><div><div><div><p class="MsoNormal">Good Morning Voice OPS</p><p class="MsoNormal"> </p><p class="MsoNormal">Is anyone else experiencing anything like this? If so please share what you have done / or will to make it stop</p>
<p class="MsoNormal"> </p><p class="MsoNormal">We have a series of smaller SIP trunk customers using Broadsoft trunk groups. By design the trunk groups have a concurrent call limitation based off the customer’s order. These smaller SIP trunks groups when compromised are able to run up HUGE fraud bills even tho they only have 5 or 6 SIP trunks. Needing to know if anyone else is seeing this that has Broadsoft and what was done to protect yourselves?</p>
<p class="MsoNormal"> </p><p class="MsoNormal">Otherwise Happy NYE <span style="font-family:Wingdings">J</span></p><p class="MsoNormal"> </p><p class="MsoNormal"><span style="font-size:17.5pt;font-family:"Arial","sans-serif"">Zak Rupas</span><br>
<span style="font-size:9.0pt;font-family:"Arial","sans-serif"">VoIP Engineer<br><br><b>SimpleSignal</b><br>3600 S Yosemite Suite 150</span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial","sans-serif"">Denver, CO 80237<br>
One Number Rings All My Phones: <a href="tel:303-242-8606" target="_blank">303-242-8606</a></span></p></div><p class="MsoNormal"><a href="http://www.simplesignal.com/" target="_blank">SimpleSignal.com</a> | <a href="http://www.simplesignal.com/blog" target="_blank">Blog</a> | <a href="http://www.facebook.com/SimpleSignal?ref=ts" target="_blank">Facebook</a> | <a href="http://twitter.com/simplesignal" target="_blank">Twitter</a></p>
<p class="MsoNormal"> </p></div></div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>_______________________________________________<br>VoiceOps mailing list<br><a href="mailto:VoiceOps@voiceops.org" target="_blank">VoiceOps@voiceops.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/voiceops" target="_blank">https://puck.nether.net/mailman/listinfo/voiceops</a></p></div></div><p class="MsoNormal"> </p></div></div></div></div></div><p class="MsoNormal">
</p></div></div></div></div>
</blockquote></div><br></div>