RE: Scam telemarketers spoofing our NOC phone number for callerid

[Matthew Huff <mhuff () ox com>]

Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has 
verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't 
realize that caller id can be spoofed and therefore are 100% sure that we are makign the harrasing calls. 

Just wanted nanog to be aware of this since the only two numbers that this has happened with are the ones in our ARIN 
whois records.



----
Matthew Huff       | One Manhattanville Rd
OTA Management LLC | Purchase, NY 10577
http://www.ox.com  | Phone: 914-460-4039
aim: matthewbhuff  | Fax:   914-460-4139



> -----Original Message-----
> From: Jon Lewis [mailto:jlewis () lewis org]
> Sent: Wednesday, October 06, 2010 11:34 AM
> To: Matthew Huff
> Cc: '(nanog () nanog org)'
> Subject: RE: Scam telemarketers spoofing our NOC phone number for callerid
>
> On Wed, 6 Oct 2010, Matthew Huff wrote:
>
> > Our system is PRI based, not sip.
>
> PRI for origination and termination...but what are your phones?  Old
> school or VOIP/SIP?  If your phone system supports SIP clients, it really
> ought to be IP restricted to only allow your phones access, or use
> something like fail2ban to stop the SIP scanners from eventually gaining
> access.
>
> ----------------------------------------------------------------------
>   Jon Lewis, MCP :)           |  I route
>   Senior Network Engineer     |  therefore you are
>   Atlantic Net                |
> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

Attachment: Matthew Huff.vcf
Description: Matthew Huff.vcf