@raymonvdm wrote:
Yesterday i performed updates on my FreePBX system as i always do once in a while. The issues with these updates is that after performing the updates the firewall (shorewall) is stopped.
Usually not a big problem, because the monitoring will notice this, so i can start the firewall. But yesterday i forget to enable the firewall. So the machine was running without a firewall for
[04-10-2018 09:50:18] SERVICE ALERT: iptables-rules;CRITICAL;HARD;3 [05-10-2018 23:10:18] SERVICE ALERT: iptables-rules;OK;HARD;3;OKThis was enough time to register on the voicemail extension and start making international calls. The international calls where automatically blocked by the SIP provider because they do that on more then x calls. So the damage is somehow limited.
But now comes the hard part. The voicemail extension is a pjsip extension, it is protected by a password of 32 characters so i don`t think they guessed the password.
How did the get the password of this extension, and why did the use this extension and not another one?
Posts: 1
Participants: 1