Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Incoming Activity in Bcm Monitor

Status
Not open for further replies.

Blackybear

Technical User
Jun 17, 2011
171
0
0
CA
Hi Guys,
I have a Bcm50 rls 6.0 with all latest patches.
I am using six (6) SIP trunk with VoiP.ms as a provider.
I have four (4) DID's getting directly answered by CallPilot.

Here is my problem.
I can see incoming activity in the Bcm montior. One,two and sometimes three incoming voip lines become blue in the monitor with Active as the status but no incoming call.

Nothing in the duration row and nothing in the Name and Number row!

I get the feeling my system is getting attacked? Could this be true?
No configuration changes for months.

Sometimes I can be a few days without having these issues. Today has to be the worse.
It is on and off non-stop....

Is there something that can be done?
Are there any ports that could be closed?

Thanks for your help!

SL
 
I suspect you are seeing general scanning for open SIP ports on the internet. I tried this a while back and would get spurious calls.

I suggest you talk to your SIP trunk provider to find out their own IP ranges and tie down firewall access to allow SIP traffic from the trunk provider through your firewall to the BCM.
 
Try forward port 5060 and see if that helps.
Only forward ports when you know its the issue when communication does not work.

Maybe list everything here you have open.











________________________________________
We take the time to try to answer your questions for free, please return the favor and take the time to answer back and include any resolution you found elsewhere, thanks.

=----(((((((((()----=

small-logo-sig.png

Toronto Canada
 
Hi Guys,

My problem is solved!
I have been told not to expose port 5060 to the internet.

All attacks to my Bcm have stopped. I now have a healthy Bcm monitor...

Thanks and have a great day!

SL

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top