eNews Archive

Published: December 21, 2010

Recently, there have been increased reports of VoIP/SIP attacks and other fraudulent activities. The typical attack tries to make a large number of registrations (10,000 or more) on your server, either resulting in taking down your server with excessive traffic or finding a way to use your server to make free calls. 

To avoid these malicious attacks, we recommend the following security measures for your SIP environments that use Brekeke products:

– Update Brekeke products to the latest version available. Download updates from: 
http://www.brekeke.com/download/download_list.php

– Follow the instructions in section 8 (Security) of the Brekeke SIP Server Administrator’s Guide:
http://www.brekeke-sip.com/download/bss/v2_x/bss_admin_en.pdf

– Create a strong password (at least six characters including a combination of upper/lower-case letters and numbers).

– Choose a strong and unique user name.

– Delete all unnecessary/inactive users (extensions, registered users, etc.).

– Use the Address Filtering feature, referring to the wiki topic below for configuration details:
http://wiki.brekeke.com/wiki/Avoid-attacks

– Use a firewall in front of Brekeke SIP Server/Brekeke PBX to block unknown remote IP addresses.

– Add a dial plan to reject SIP attacks, using the following wiki topic as a guide: 
http://wiki.brekeke.com/wiki/Avoid-attacks

– If possible, choose a unique prefix number for PSTN (analog) lines.

Here are some additional resources for protecting your SIP system from attacks: 
http://wiki.brekeke.com/wiki/Security
http://wiki.brekeke.com/wiki/Avoid-attacks
http://wiki.brekeke.com/wiki/Connect-to-the-BSS-Admintool-with-SSL

[Privacy Statement] At Brekeke Software, we recognize that your privacy is very important, which is why we will never share your e-mail address with anyone. Read more about Brekeke’s Privacy Policy at http://www.brekeke.com/company/company_privacy.php.

Copyright © 2010 Brekeke Software, Inc. All rights reserved.