@black3dynamite said in Fedora install doesn't see SATA drives ...:

Try turning off SecureBoot.

Thanks. I checked and this was off.

I finally booted into gparted and it was throwing some errors that seemed to be because there was no partition table on any of the 4 drives. I added an unformatted partition on each and then then once I rebooted the drives were found by the fedora installer. I presume it would have also been found by the Centos installer at that point as well but I didn't actually try it.

We recently switched to freepbx with yealink phones and voip service and my users are saying that sometimes they hear a severe echo on incoming calls to the point that they can't understand the person on the far end. This is only happening very rarely, maybe 1 call every day or two but it has been reported by 3 different users so I don't think it is isolated to just one person or extension. I've got a 50M fiber circuit at this location that has no capacity issues at the moment so I don't expect bandwidth to be an issue

Is this likely coming just from the other party to the call? At first I thought maybe a cell phone caller with bad connection but I would think that symptoms in that case would be a garbled or stuttered type call but not necessarily echo.

Is there anything I can control related to echo when my piece of the call is all IP from phone to service provider? I thought echo was caused by impedance mismatches on copper lines and trunks but I don't have any such link in the call, at least not that I have any control over.

Does anyone have any recommendations on video conference equipment that integrates with MS Teams. We've got 1 big conference room (seats 15) and a few smaller ones that seat 5-8. I was starting to look at some equipment to handle the audio/video part but just wanted to see if anyone had any experience with a system such as this with MS Teams.

Thanks

@JasGot said in Email phishing attempt against one of our vendors was successful ...:

@BraswellJay said in Email phishing attempt against one of our vendors was successful ...:

Subsequently and on the same day, the vendor received another email that he thought was from one of our accountants directing him to ACH to a different (bogus) account.

What makes me also think it was a directed phish attack on your vendor, is that you say the vendor received an e-mail regarding another ACH account number on the same day, but you didn't say the message had any indication it was a follow up or correction to the earlier message.

Thanks everyone for the feedback. It does appear it was on the vendor end but it was a more sophisticated attack that did involve us being fooled as well even though the target was our vendor. From our investigation this is what we believe actually happened:

• Vendor owed us and was going to pay by ACH and requested details. These details were sent to him by our head of finance in an encrypted email which the vendor did receive.
• The attacker then spoofed our accounting team by sending us a phishing email that appeared to come from the vendor (the domain name used against us left an "s" off of the end of the domain name, thus appeared valid to our accounting team) stating that he had not received the ACH info (which the vendor had, this was the attacker phishing us). One of our accountants responded (to the wrong domain) once again giving the correct ACH details.
• At this point the attacker had all he needed to spoof an email that appeared to come from the accountant that had responded to him. The attacker used that info to send a phishing attack email to the vendor which appeared to come from our accountant but using the wrong domain name and contained the attackers ACH info.
• Vendor was fooled by this email and sent payment to the wrong account.
• Vendor ignored (for some reason, don't know why) the fact that when he went to ACH the money the company name appearing on his bank portal as the destination for the payment was not our company name.

One other detail is that both of the spoofed domains that were used in the attack were registered through google on the same day approximately 4 weeks ago which would suggest they were anticipating being able to use us and the vendor in a coordinated attack.

https://www.zdnet.com/article/virginia-legislative-agencies-and-commissions-hit-with-ransomware-attack/

@scottalanmiller said in If you are new drop in say hello and introduce yourself please!:

Welcome @BraswellJay

Thanks! I have lurked here for a while and learned a great deal from the posters here so thanks to all who have contributed.

Re: 8 port FXO gateway needed

I have a site where I need an 8 port FXO gateway. I had been leaning toward the Grandstream gxw4108 but based on the linked thread above from a few years ago that seems maybe to be a low call quality device so I'm hesitant to try that now.

I see that Sangoma has an updated model, the Vega 60. Has anyone had any experience with this device with FreePBX? How was call quality?

This site currently has an old Nortel BCM but Centurylink just advised me that they are terminating our support agreement for that system at the end of April due to it's age.

This site is in a rural area and my only access is dual T1s so I don't think ditching the POTS lines and going SIP is an option.

Thanks!

I'm setting up a FreePBX instance and doing some testing. Right now I have two extensions, one a SIP extension using Zoiper softphone and the other a virtual extension with voicemail enabled, just for something to test with.

I seem to be able to make a call from the softphone to the virtual extension with no problem in that it seems to connect each time but the audio to hear the voicemail greeting is not received most of the time.

I've broke out wireshark to see if I could determine anything. One thing I noticed is that when my Zoiper softphone first registers with the server it seems to receive a 401 Unauthorized from the server before successfully registering. Is it normal to receive receive 401 Unauthorized before a successful registration? .248 is the server and .139 is the softphone.

Source,Destination,Protocol,Length,Info
192.168.2.139,192.168.2.248,SIP,619,Request: REGISTER sip:192.168.2.248;transport=UDP  (1 binding) | 
192.168.2.248,192.168.2.139,SIP,604,Status: 401 Unauthorized | 
192.168.2.139,192.168.2.248,SIP,787,Request: REGISTER sip:192.168.2.248;transport=UDP  (1 binding) | 
192.168.2.248,192.168.2.139,SIP,683,Request: OPTIONS sip:[email protected]:56778;rinstance=b05461348c8fdb80;transport=UDP | 
192.168.2.248,192.168.2.139,SIP,661,Status: 200 OK  (1 binding) | 
192.168.2.139,192.168.2.248,SIP,712,Status: 200 OK | 
192.168.2.139,192.168.2.248,SIP,784,Request: REGISTER sip:192.168.2.248;transport=UDP  (remove 1 binding) | 
192.168.2.248,192.168.2.139,SIP,616,Status: 401 Unauthorized | 
192.168.2.139,192.168.2.248,SIP,784,Request: REGISTER sip:192.168.2.248;transport=UDP  (remove 1 binding) | 
192.168.2.248,192.168.2.139,SIP,567,Status: 200 OK  (0 bindings) | 
192.168.2.139,192.168.2.248,SIP,619,Request: REGISTER sip:192.168.2.248;transport=UDP  (1 binding) | 
192.168.2.248,192.168.2.139,SIP,604,Status: 401 Unauthorized | 
192.168.2.139,192.168.2.248,SIP,787,Request: REGISTER sip:192.168.2.248;transport=UDP  (1 binding) | 
192.168.2.248,192.168.2.139,SIP,683,Request: OPTIONS sip:[email protected]:56778;rinstance=3b911898cd7a2274;transport=UDP | 
192.168.2.248,192.168.2.139,SIP,661,Status: 200 OK  (1 binding) | 
192.168.2.139,192.168.2.248,SIP,712,Status: 200 OK | 
192.168.2.139,192.168.2.248,UDP,46,56778  >  5060 Len=4

I notice also that if I capture then the softphone is constantly sending RTP packets to the server but the server is not sending any RTP packets back to the softphone, which I presume is why I'm not hearing the audio of the voicemail greeting from the server.

@DustinB3403 said in FreePBX / Random loss of audio ...:

Audio issues tend to be due to codec issues.

Thanks, you were right it was codec issue which I hadn't even considered. I changed zoiper to exclude some of the one's it was saying were available and have had zero issues in about 15 test calls since then.

@scottalanmiller said in FreePBX / Random loss of audio ...:

The codec you probably want on both is Opus. Since you paid for that in your Gold package on Zoiper.

I didn't pay for Zoiper. I downloaded the client from their site and when it starts it offers me to upgrade to Pro or something like that but I just choose the option that says continue with a free account. This is Zoiper5. I did just install it yesterday right before I started testing so perhaps they are letting me use that as a trial but will go away? Not sure, but I haven't paid for it for sure.

Our Sales Director asked me about getting digital business card. He had a customer that was using Blinq which he liked.

A few others that I found were HiHello, Linq and Tappy.

Has anyone used Blinq or others? What has your experience been with them?

I'm new to docker and was going to do some experimenting. I thought I'd start by seeing if I could get a Unifi controller set up in a container on a test server. I found two different images on docker hub but as far as I can tell neither is provided by Unifi itself.

That got me to wondering how safe should I consider public images such as these? Before I start using these are there any best practices that I should consider for what to look for before running an image from an unknown source?

The two images I found for the unifi controller are these :

https://hub.docker.com/r/linuxserver/unifi-controller
https://hub.docker.com/r/jacobalberty/unifi

I'm wanting to improve the ability for our mtc staff to talk on phone with vendor(s) support while they are on a noisy plant floor. Our facility is in a cell deadspot. Coverage outside is spotty at best and once inside is essentially impossible to use.

Ideally what I would want is some effective noise cancelling headphones, probably with a boom mic that can either be a fully functioning SIP extension off of FreePBX or at least be connected to a device that is itself the extension.

Right now I'm thinking my best bet is to find something that can connect with WiFi and have Linphone installed on it for the extension. Then use something like this for the headphones

I have a yealink W56 for them now and that does have a standard audio jack so I could get a set of corded headphones, but I'm not excited about a corded solution since they could be using it near machinery with moving parts.

I just wanted to see if anyone else had a similar situation and what you may have done to address.

@scottalanmiller said in Centralized Log Management:

@braswelljay said in Centralized Log Management:

Does not collect server, application and network logs sufficiently to respond to and investigate a cybersecurity incident

This is not a bad thing. Collecting logs is good, centrally is best. But only if you have a team that can use them. If you had that, likely you'd already be doing this. So the question is... before doing this, do you have a team ready to leverage it? Or is this just a way to potentially spend more money with the "cyber security" guys because there's no better way to make money than getting paid to read logs.

No there is no team that would be able to leverage. This is a very good point and definitely something for us to keep in mind.

From your perspective is there any value in collecting them centrally so that if we were to be breached it might help other experts that we would almost certainly have to engage? That is even if we don't really have the inhouse expertise to use them effectively on a day to day basis, is it still worth keeping and protecting those logs in the event that they are needed due to an actual compromise of some kind?

We recently had a cyber security audit performed and two of the findings were related to log retention. The specific findings on the audit were:

• Does not collect server, application and network logs sufficiently to respond to and investigate a cybersecurity incident

• Audit logs are not centrally stored and retained for at least a year

I was hoping to see what others might be doing to address these kind of issues. I've seen Graylog mentioned as a possible solution.

Any other tools that perform this that you might recommend we look into?

https://www.zdnet.com/article/virginia-legislative-agencies-and-commissions-hit-with-ransomware-attack/

I have an edgeswitch that I have rendered unreachable. I was making some changes and can no longer reach the web config interface.

Will this usb to rj45 console cable work with the Ubiquiti edgeswitch? Does anyone have a recommendation on one to use?

https://www.amazon.com/Console-console-Routers-Router-Windows/dp/B075V1RGQK/ref=sr_1_3?dchild=1&keywords=usb%2Bto%2Brj45%2Bconsole%2Bcable%2Bubiquiti&qid=1634160625&sr=8-3&th=1

I want to see if I can get back in enough to undo my error but don't currently have a console cable.

Thanks.

Youtube Video

I'm wanting to port ~50 DIDs to Skyetel.

Does anyone have any promo codes that might get some relief on the port in fee?

@jaredbusch What is your sense of if @Skyetel or any other provider could contain such an attack?

Do you think voip.ms just got caught unprepared or is there just not really a defense for such an attack on a SIP service?