The IP Office Firewall - a forgotten feature 17

[Gunnaro]

Time to share some more...

We are constantly under attack from hackers that want access to our phone lines!
Too many IPO's are virtually unprotected, hooked up to the internet directly with routing that welcomes everyone to the party.
Remember: Changing the password is simply not enough.

Having a proper protection should be a top priority for everyone that deals with telephony systems.
Failing at this will sooner or later attract a talented hacker.
A successful attack could potentially ruin a business; either the customer, the maintainer or the provider.

Lately we have even seen attacks coming from the inside, an infected company computer making way for the outside attacker.
It might be a good idea to start looking at your setup. If you have no idea on how to do this, there are plenty of talented techs here that will do it for a fee.

But, you came for the IPO Firewall...
I've spent a few evenings "cracking" the code, resulting in a tool to help you utilize this forsaken feature.
Avaya has not made any good documentation on this, so I've provided instructions as well.

Warning: The built-in firewall is not meant as a primary protection, but it sure is better than nothing at all.
I use it as a buffer on the inside, keeping nosy employees away and blocking infected computers out.

The Calculator

Don't forget to

if you find this helpful

Stay safe!

Kind regards

Gunnar
__________________________________________________________________
Hippos have bad eyesight, but considering their weight, it’s hardly their problem

 

[Westi]

helpful thank you have a star



Joe W.

FHandw, ACSS (SME), ACIS (SME)


“This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[Gunnaro]

Kind regards

Gunnar
__________________________________________________________________
Hippos have bad eyesight, but considering their weight, it’s hardly their problem

 

[montyzummer]

thankyou wonderful info i wonder how many other BP`s will potentially avoid getting stuck in the sh8t , if not by implementing and understanding your well written simple instructions .... BUT BY TAKING NOTICE OFF THE MAIN MESSAGE >>>>>WAKE UP YOU ARE AT RISK!!!!!!!!!!!!!!!!!!!!!!!!!

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[amriddle01]

It would take the programmers at Avaya but a few hours to make the firewall interface actually useable in the same way you did with that Excel tool, something like you see in a router. Why not have the system/Manager PC do the calculations/mathematical legwork, it's what they do best.

Good work btw

 

[montyzummer]

^ indeed

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[Gunnaro]

That was my thought too, Andy.
Could be that Avaya don't want to take on the responsiblity of keeping it updated...

Kind regards

Gunnar
__________________________________________________________________
Hippos have bad eyesight, but considering their weight, it’s hardly their problem

 

[amriddle01]

You would hope they would just plain remove it if that was their intention. If you have a feature available, make it accessible and useful or get rid

 

[montyzummer]

HA Ha Andy two very indicative words of a feature that needs removing but remains .... fill in the blanks LINE APPEARA***

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[Gunnaro]

Ha ha, indeed Monty!

They can't just remove it, there are probably thousands of IPO's with only that firewall as protection.
Imagine the disturbance in the force if it suddenly went away on an upgrade...

Kind regards

Gunnar
__________________________________________________________________
Hippos have bad eyesight, but considering their weight, it’s hardly their problem

 

[montyzummer]

hmm the shift in the force may well implement enforced multiple line appearance.... with nortel park and page that utilities a third and forth SD card slot interface with no other useful function other than 10000000000000000000000 park and page locations .... the dark side is endless...lest not forget each p&p slot would cost $50

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[IPGuru]

I did not think the firewall even worked on internal data traffic, I will have to play with this now

A Maintenance contract is essential, not a Luxury.
Do things on the cheap & it will cost you dear

 

[Gunnaro]

Well, you will have to conect the WAN port to the internal LAN then.
I've 'turned' around quite a few system the past 6 months, got ridd of some snooping SOB's.



Kind regards

Gunnar
__________________________________________________________________
Hippos have bad eyesight, but considering their weight, it’s hardly their problem

 

[hairlessupportmonkey]

Since Avaya is essentially a network equipment manufacturer, how about they just make a decent bit of kit with a FW and SBC built into the one box. Add that with a nice 8 port PoE switch and one touch integration into the IPO and it will sell like fucking hot cakes.

ACSS - SME
General Geek

 

[montyzummer]

Samsung tried that with the ubigate .... my god it was horrible ... but i like the concept

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[amriddle01]

We had someone trying to flog us/get us to flog Ubigate....no thanks mate

 

[montyzummer]

Good decision biggest piece of unreliable , pants , convoluted , bag ohhshit* you could ever have the unfortunate task of trying to work on , swapped it out for a soe in the end ..... god knows how the sales man and lease company got away with that , it had been sold as a sip gateway (the ubigate) to interface with a NEC that had analogue trunks ...... wow i hate sales men

APSS (SME)
ACSS (SME)
ACIS (UC)

 

[hairlessupportmonkey]

BT sell the ubigate £1500 with their leased line and SIP trunk bundle.

nasty.

Quintum all the way for media gateways.

ACSS - SME
General Geek