Security
      Back to home
      1. Old KB
      2. Control Portal
      3. Security

      Using the Anti-Hacking Tool

      This article will provide a walkthrough in configuring the Anti-hacking tool in the bvoip phone system.

      Why Use the Anti-Hacking Tool?

      The tool will massively blacklist IPs from different countries and will only allow certain countries. A successful SIP registration will depend on the user-agent used by the phones which will be applied with our custom CUA (custom user agent) templates.

      System Restart Requirement

      Enabling this feature will require a system restart of your phone system. 

      Blacklist Tabs

      The three sub-tabs within the Blacklist tab (Allowed, Denied, and System) are read-only, these are a summary of the current state of the firewall.

      Custom Phone Templates Notice

      If you have custom templates, please contact support and they will help with creating a new template with the CUA implemented. 

      Setting Templates

      1. Log into the bvoip phone system.
      2. Go to the Tool Menu. AHT1-6
      3. Select the Templates subsection. 
      4. Click on the Download and Update Templates button. This button will update the existing templates to the published new ones. 
      5. Click on the Update Device Templates button.
      6. Select the correct template. The naming syntax for the new templated will be shown as  bvoip_cua – *MODEL_NAME*.AHT1-5
      7. Click on the Save Changes button. The phone system will then restart.
      8. The phones will then need to be reprovisioned so that they accept the new templates and apply the new UA configuration.

      Setting the UA Whitelisting

      1. Log into the bvoip phone system.
      2. Go to the Tool Menu.
        AHT1-1
      3. Select the Anti-Hacking subsection. 
      4. Go to the UA Whitelist tab. AHT1-8
      5. Click on the Generation button. A pop-up will appear. 
      6. In the pop-up window, you will need to choose one of two button options: AHT1-7
        1. Yes, Continue and Restart Services - Choose this option to restart the phone system immediately to have the UA configuration applied.
        2. Continue Without Restarting Services and I Will Restart on my Own Later - Choose this option if you plan to restart at a later time but wish to have the changes saved. 
        After a few minutes, the Custom User-Agent field will generate a code. 
      7. Click on the Enable User-Agent Whitelist button. You can then add User-Agents. Once the Enable User-Agent Whitelist button turns yellow, this means that the phone systems will block SIP registrations that do not include this UA in the headers.

      Country IP v. Individual IP Blacklisting

      Individual IPs that are whitelisted will win over backlisted countries. This is so that exceptions can be made when blacklisting countries. 

      Setting Country Blacklisting

      1. Go to the Countries Blacklist tab.
      2. Click on the Disable All button. AHT1-3
      3. Click the checkboxes for the desired countries to be enabled. 
      4. Select Yes in the Enable Countries Blacklist drop-down. After a few seconds, the updated configuration will be applied to will be applied and all countries that are disabled will not be able to connect to the phone system. AHT1-2