September 2024
Intermediate to advanced
414 pages
11h 34m
German
Content preview from Asterisk: The Definitive Guide, 5. AuflageBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Kapitel 22. Sicherheit
Diese Arbeit wurde mithilfe von KI übersetzt. Wir freuen uns über dein Feedback und deine Kommentare: translation-feedback@oreilly.com
Wir verbringen unsere Zeit mit der Suche nach Sicherheit und hassen es, wenn wir sie bekommen.
John Steinbeck
Die Sicherheit deines Asterisk-Systems ist von entscheidender Bedeutung, besonders wenn das System dem Internet ausgesetzt ist. Angreifer können viel Geld damit verdienen, Systeme auszunutzen, um kostenlose Telefonate zu führen. In diesem Kapitel erfährst du, wie du dein VoIP-System besser absichern kannst.
Scannen nach gültigen Konten
Wenn du dein Asterisk System dem öffentlichen Internet aussetzt, wirst du mit ziemlicher Sicherheit einen Scan nach gültigen Accounts sehen. Beispiel 22-1 enthält Log-Einträge von einem Asterisk-Produktionssystemder Autoren.1 Dieser Scan begann mit der Überprüfung verschiedener gängiger Benutzernamen und ging dann später zur Überprüfung von Nummernkonten über. Es ist üblich, dass SIP-Konten genauso benannt werden wie Nebenstellen in der Telefonanlage. Dieser Scan macht sich diese Tatsache zunutze.
Tipp
Verwende nichtnumerische Benutzernamen für deine VoIP-Konten, damit sie schwerer zu erraten sind. In diesem Buch verwenden wir zum Beispiel die MAC-Adresse eines SIP-Telefons als Kontonamen in Asterisk.
Beispiel 22-1. Protokollauszüge vom Scannen des Kontos
[Aug 22 15:17:15] NOTICE[25690] chan_sip.c: Registration from '"123"<sip:123@127.0.0.1>' failed for '203.86.167.220:5061' - No matching peer ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.