sundance-communications.com/forum Forums TDM Business Telephone Systems NEC Telephones & Systems Public IP to PBX/Voicemail how safe??

The last 3 or 4 installs I've done the customer has provided me with a public IP address to access the IPK II and the Elitemail LX.

I have changed ALL the passwords (even the manufacturer level and the Putty access), but was curious how safe this is form being hacked??


Is there a better way? How do you guys handle remote changes on the IPKII and LX VM? MDMU10 ever used?

D

Never never never ever put one on a public IP address. Someone will own your system if you do. It may not be right away but it will happen to you and has already happened to others, just ask NTAC. The voicemail and PVA card both run on Linux and have disk space left on them plenty of room to install a malicious application. Even with your passwords changed your system can still be accessed, and your password can be gotten easily in under 2 minutes. No I will not tell you how on an open forum to get the password so do not ask. My company has a custom VPN solution that we sell to our customers for $100.00 it includes a small VPN router that is installed on the customer network. The router is set to allow us access into the phone system, if the customer does not want to buy the VPN solution then we put the system on the customers internal network and use a remote control software package, like Confra-tel, goto meeting, Web-ex to work on the system remotely. Anyway about it when we work on it remotely we charge a service fee to the customer and if they did not buy the VPN solution then we also charge them a fee for using the remote PC software. It is still cheaper to the customer then coming on site, and I have never had complain yet.

How difficult is this VPN solution to setup?

I would want to implement something soon and get it in place where we are using public IP's now.

Can you give me a specific list of equipment needed?

D

The solution that we use was custom built, it handles over 1000 VPN connections currently. But you could use something like Endian firewall on your end, then use the cheapest SOHO router you can find that is capable of doing VPN's. You would want to use a VPN method that is secure. I like OPEN VPN but it is just a matter of preference.