How to prevent "Toll Fraud through FXO lines"

To prevent toll fraud please follow below steps


Access-List
ip access-list extended 110
access-list 101 deny udp any any eq 2427 log
access-list 101 deny tcp any any eq 2428 log
access-list 101 deny tcp any any range 1718 1720 log
access-list 101 deny tcp any any eq 1731 log
access-list 101 deny tcp any any eq 2000 log
access-list 101 deny tcp any any eq 5060 log
access-list 101 deny udp any any eq 5060 log
access-list 101 permit ip any any

Next apply this access-list on the internet interface. It can be dialer in case of PPPoE internet and  FE in case of fixed IP broadband

ip access-group 110 in

Log is enabled to monitor the number of hits against each line. But if these logs increase CPU utilization then apply the access-list without log command in the end.

Port 5060 will be targeted more due SIP port.

UDP 2427 (MGCP)
TCP 2428 l (MGCP)
TCP 1718 1720 (H323)
TCP 1731 (MSICCP)
TCP 2000 (SCCP) SKiNNY  Cisco
TCP 5060 (SIP)
UDP 5060 (SIP)

Juniper SRX Firewall J-Web/GUI suddenly stops working.

Juniper SRX Firewall J-Web/GUI suddenly stops working.


If your Juniper FW J-Web was working and suddenly it not responding then to fix subjected issue please follow below command after doing ssh to your Juniper FX


restart web-management


Now try again!!!!
hopefully it will fix your problem.

Getting calls from your own Number

Getting calls from your own Number

Don't panic if you find an incoming call from your own number means the incoming number will be your own number.

Its a fake call, hackers are using Caller ID spoofing technique to change the incoming number to any number they want. Sometime this call will an automated voice or some time there will be a person pretending a business person, seller, bank person etc.

The target is to get your details, personal information, email or bank accounts password etc.

So how to protect such type of these attacks simply don't tell anything related to you not even your name or else Hang-Up and relax.