topic Re: Can rapid fire spam phone calls be blocked by the PA in General Topics

Can rapid fire spam phone calls be blocked by the PA

jdprovine — Mon, 17 Jun 2019 20:18:38 GMT

Can rapid fire spam phone calls be blocked by the PA, they seem to be similar to a dial of service and they are making it possible for us to make outgoing calls or recieve incoming calls by using all our phone sessions? Is there a way to block them using the PA?

Re: Can rapid fire spam phone calls be blocked by the PA

BPry — Tue, 18 Jun 2019 02:24:53 GMT

@jdprovine,

This would be better to control at your gateway/SBC instead of the firewall.

Re: Can rapid fire spam phone calls be blocked by the PA

jdprovine — Tue, 18 Jun 2019 13:21:57 GMT

SBC is a session border controller, one other person mentioned it and this is the first time I have ever hear of it. It is specifically for phone systems?

Re: Can rapid fire spam phone calls be blocked by the PA

BPry — Tue, 18 Jun 2019 13:49:05 GMT

@jdprovine

Yes, an SBC is generally setup for VoIP and a PBX would generally be either deployed alongside a gateway or act as its own gateway. Whether or not you have one would be dependent on what you are using as a phone system.

Re: Can rapid fire spam phone calls be blocked by the PA

jdprovine — Tue, 18 Jun 2019 14:06:15 GMT

We have cisco IP phones, I would think it would be helpful to keep us from getting attacked so to speak

Re: Can rapid fire spam phone calls be blocked by the PA

jdprovine — Tue, 18 Jun 2019 14:58:52 GMT

@BPry

I am new to phones but I believe we do have a SBC - cisco cube, so I am wondering if the configuration is set way to broad and accepts way too much?

Re: Can rapid fire spam phone calls be blocked by the PA

BPry — Wed, 19 Jun 2019 03:15:39 GMT

@jdprovine,

I'm not all that fimiliar with Cube, but I would assume that it would have a similar featureset as an Expressway and CUCM whcih would make this possible.

You might want to verify that whoever setup your equipment has SIP UDP disabled so that toll fraud isn't chewing into your licenses. Look into whether or not Cube can do a CPL rule.

Re: Can rapid fire spam phone calls be blocked by the PA

jdprovine — Wed, 19 Jun 2019 13:38:39 GMT

@BPry

I am totally new to Cube and phones in general,LOL I don't even know what expressway is. thanks for the suggestions I will check into it,

Re: Can rapid fire spam phone calls be blocked by the PA

RobinClayton — Thu, 20 Jun 2019 09:02:14 GMT

It's 5 years since I have managed a Cisco UCM, but your definatly going to have more success there than tryign anythig on the PA.

But if your on a SIP trunk, then speak to your phone system provider.

Rob

Re: Can rapid fire spam phone calls be blocked by the PA

jdprovine — Thu, 20 Jun 2019 20:35:09 GMT

@RobinClayton

And yes we are on a SIP trunk. When you say phone system provider do you mean cisco or the ISP that provides for our external lines?

Re: Can rapid fire spam phone calls be blocked by the PA

RobinClayton — Fri, 21 Jun 2019 07:42:16 GMT

I would start with The ISP that provides the SIP trunk. At least ask them the question as they probably will be able to give you a yes or no in seconds.

As with most things it's better to block as close to the source as possible, if you try to do the blocking the "Session Initiation" is still trying to take place and impacting your PBX, Firewall, SIPtrunk and Internet. You may go from lots of nuicance calls to a saturation of Initiations.

The SIP/ISP provider should be able to limit the rate of new calls.

But a quick hunt arround sugests CUBE has a feature that may help.

"call spike"