Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - CauselessEffect

Pages: [1]
1
Other Yate server issues / Yate Server Security
« on: September 21, 2013, 07:05:25 AM »
I'd like to address something that I haven't seen any posts about yet on here, and that's server security.  Unfortunately, I'm still very much of a newbie when it comes to Yate and SIP servers in general, so I don't have any good answers to my question.  I would like to know if anyone out there has any experience using Yate in a production environment or has learned to secure their server beyond the default configuration.

I recently followed this guide on using Yate to communicate with Google Voice (http://docs.yate.ro/wiki/Connecting_To_Google_Voice), and that remains the only changes I have made beyond the default configuration.  While attempting to debug some communication issues, I had Yate running via command line with "yate-console.exe -Dt -l log.txt".  Within 5 hours of starting the server, my log file had grown to 2GB in size.  I quickly stopped the server and looked in the config file to find countless call entries with a user-agent of a "friendly-scanner".  Searching this on Google turned up a number of pages about SIP bots.  Due to the sheer number of entries from this bot, it would take me a very long time to figure out what exactly they were trying to do, but clearly I now have reason to worry about using my server.

What concerns me is that I am operating the latest version of Yate with the default configuration, changing ONLY what was recommended to me on Yate's documentation for using Google Voice.  Fortunately, I was able to detect this exploit due to another user on the forum's help in suggesting file logging.  I worry there are countless others using Yate that are unaware of what's happening on their machines.

In any case, I am posting here in hopes someone has experience securing Yate server, perhaps for production purposes.  The SIP user I had configured was using a strong, 8-character password with a non-default user name.  I will be changing the password to a much longer, more secure password, but I am still hesitant to leave Yate running for very long.  I do not host any public services from my IP, so I am genuinely surprised I was discovered so quickly.

If anybody has any experience with this or general security tips for SIP, please let me know!

2
Yate server for Google Voice / Beginner in need of help!
« on: September 17, 2013, 04:06:15 PM »
Please forgive me for my ignorance, I have an extensive IT background, but am completely new to the world of VoIP!  My ultimate goal here is to get Yate configured to work with Google Voice so that I can make calls from my Android phone without using my cellular minutes.

I am currently utilizing VoIP on my Android phone in the form of CSipSimple, Pbxes.org, and Google Voice.  With this setup, I can successfully make and receive calls using my Google Voice number without burning my plan's minutes.  Woohoo, data-only VoIP!  The problem is connection reliability while using the free Pbxes service.  I am frequently disconnected and call quality is non-ideal.  My hopes are that an in-house solution will improve my VoIP experience.  I may be way off on this, but it is my understanding the Yate server can fill this gap.

I have been researching VoIP services for the past week and a half and am still completely lost in the sea of telephony terms and various software solutions out there.  I have browsed the Yate website and attempted a couple tutorials, but I have hit a wall and don't know where else to turn to for answers.  I have a Windows server with Yate client and server installed.  The client works fine when connected to Google Voice, however, it appears to be connected directly to Google instead of through my Yate server.

I hate to ask such a vague question, but my hopes are someone can help guide me through the configuration process with Google Voice (or at least point me in the right direction).  So far, I have attempted to follow the tutorial posted here: http://www.tuxguides.com/yate-server-free-google-voice-calling/
However, as a Linux guide (and dated from 2011), I suspect there are some incompatibilities.  If anyone has experience with Google Voice integration (and hopefully Android SIP too!), your help would be greatly appreciated!

Pages: [1]