Re: How common are wide open SIP gateways?

[Chris Hills <chaz () chaz6 com>]

On 05/02/2010 17:33, Drew Weaver wrote:
>         Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or 
> authentication? Recently we have noticed a couple of instances where we get abuse complaints from companies who claim that one of our hosting clients 
> 'stole SIP service' from them. This reminds me somewhat of the 'SMTP open relay' days. We obviously take action and shut the offending user 
> down but I can't help but wonder how common this practice is. Usually I just ask the company why their system allows anyone to use their SIP gateway and 
> they usually say something like "We can't predict what IP our users will come in from... etc"
>
> I am just wondering if anyone else has noticed this trend.

If you register your phone numbers in e164.arpa it is pretty useless 
adding records for a sip server that requires authentication because 
hardly anybody is going to be able to reach you!

(e164.arpa provides phone number to service mapping, like ip6.arpa 
provides ipv6 address to hostname mapping)