Extension 888 security?

Discussion in '3CX Phone System - General' started by pc75, Nov 25, 2016.

Thread Status:
Not open for further replies.
  1. pc75

    Joined:
    Aug 5, 2016
    Messages:
    6
    Likes Received:
    0
    We have 3CX running quite happily - for security, we have disabled outbound calls to most international destinations.

    In reviewing event logs, we see last night the following entry:

    Call from [888] to [00442033477788] has been rejected by the 3CX Country Blocking Feature [0044]. Reason: 00442033477788 contains Prefix 0044. Calls to 0044 are not allowed by system. Resolution: To allow this call access the 3CX Management Console, Settings, Security, Allowed Country Codes and enable the country or continent that matches this prefix.

    Prior to this we see an error a few minutes earlier:

    Device 442033477788 dialed on (AnyLine@<provider>) had no available outgoing trunk(s) for Call(from "442033477788--12098130127"<sip:888@<our IP address>;tag=063b285b to 442033477788)

    Please note - in above, <provider> is the name of our VoIP provider, and <our IP address> is our public IP address.

    We don't use such an extension, and nor have we set up/configured fax (from what I read, extension 888 has to do with faxes).

    The above looks to me like a hacker managed to log in to extension 888, and try to send a fax? I have looked all over the management console, and I can find nowhere to change the password of this extension?

    Could I trouble if anyone has an insight into the above to share with us please?
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,355
    Likes Received:
    223
    I do recall, some posts, in the forum a while ago regarding "concern" about the default password for the fax extension(s). I'm assuming, that what your log is showing, is that "extension" 888 was allowed to register (because the password was easy to guess), then attempted to place some calls.

    Found some of the posts...

    viewtopic.php/topic44303.html?forum_uri=&start=&t=44303
     
  3. pj3cx

    pj3cx Active Member

    Joined:
    Aug 1, 2013
    Messages:
    645
    Likes Received:
    1
    Hi there,
    Please verify that extension 888 has a strong and random password, and if not renew it, under the fax settings (v14: Fax / 888 - 3CX Fax server, v15: Settings / Fax Server).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. pc75

    Joined:
    Aug 5, 2016
    Messages:
    6
    Likes Received:
    0
    With many thanks, and apologies for the edlay in getting back here on this! I have now checked... we are using V15 so I went to Settings - there is no entry "Fax Server". May I trouble to ask - where to from here?
     
  5. YiannisH_3CX

    YiannisH_3CX Support Team
    Staff Member 3CX Support

    Joined:
    May 10, 2016
    Messages:
    4,349
    Likes Received:
    274
    Actually is settings>> FXS/DECT
     
Thread Status:
Not open for further replies.