Re: {bb} Modem Not Answering?

["PAUL WILLIAMSON" <pwilliamson@mandtbank.com>]

The only problem with that is that vendors have to dial in for 
remote support.  There is no way around that.

We don't need outbound at all.  That option isn't even 
enabled on our PBXs (for the outbound calling).  We've tried to 
do an auto-callback to the phone number that just dialed 
in with a challenge, and most vendor PBXs don't support that.

If we had no need for remote vendor support, there would 
be no  issue.  Webex (while being a vulnerability itself) is one 
option coming into its own.  

We have one person each shift responsible for modem 
access.  They alone are responsible for the condition of 
every modem in the support modem group, and they 
have a little desktop applet running indicating the status 
of each modem (off, online not in use, online in use).

Since I have the script written for monitoring the 
modems in a windows environment, I'm not sure 
how much effort would be involved in moving that over 
(or totally rewriting it) to run it on an AIX platform.

Paul


>>> "Daniel O Winkless" <wink@usgs.gov> 05/26/05 10:42 PM >>>
Sorry Paul,
        I did not miss the point.  In my situation, inbound is
impossible, 
so no monitoring is needed.  The writers asking for how to monitor 
incoming modems (you too) need only the outbound capability and if that

could be available at all times w/o any inbound, you would all be
happier.
        I am suggesting that others attempt to adopt a strategy similar
to 
mine.  Modems open vulnerabilities IF they can be called from the
public. 
Shane's original query would not be needed at all if the modems could
not 
be called.  That the modems are on publicly callable lines means they
are 
vulnerable, the company needs a policy, and they need monitoring to
verify 
compliance with the policy.
        Wouldn't eliminating the vulnerability be even better,
especially 
if it's possible to continue to provide the support services?  I have
zero 
need to monitor my modem.  It's the inherent two-way nature of modems
that 
cause your concerns.
        Look at how many people are involved at you company for every 
modem use.  Every one has other tasks to perform, except they can't 
because inbound modems are a problem and need the coordination
described 
to limit or eliminate the problem.  Eliminate the ability to call the 
modem and you don't have to monitor its availability.
        I don't have suggestions for how to write such a script to work

with BB.  I have a suggestion for how to eliminate the need for such a

script.
        From my security minded standpoint, I'm in a better situation
than 
you are.  Get you NOC analysts to assign outbound only numbers to you 
modems and stop worrying, stay bored.  Bored is good.  Wish I could be

bored again.
                Dan



"PAUL WILLIAMSON" <pwilliamson@mandtbank.com> 
05/26/2005 07:19 PM

To
bb@bb4.com, wink@usgs.gov 
cc

Subject
Re: {bb} Modem Not Answering?






I think you're missing the point.  It's not outbound that 
needs monitoring, it's the lack of inbound.  We have the 
same issue, and D'OH! I had never thought to use BB.
We only have the modems turned on when a support 
call from a vendor is expected.  Then a NOC Analyst 
brings one of our dial up interfaces online, and turns 
it off when the engineer is finished.  Something new 
to work on now...I knew I wass getting bored.

Paul

>>> wink@usgs.gov 05/26/05 6:13 PM >>>
Hi All,
        I understand the desire NOT to have modems available for dial
in. 
I don't want that either.  My BB server has such a modem so that qpage
can 
dial out to send pages.
        Our PBX allows us to define phone numbers that cannot be
dialed

from outside.  Our PBX number is 505-XXX-7900.  My modem's number is 
505-XXX-5938, a number that might get to someone, but it won't be my 
office.  This means I can leave the modem on all the time and war
dialing 
will not find it.  Well, within the PBX, someone can call it, but if
they 
are in my PBX, they are in my LAN, so no need,
        Anyone who needs only dial-out capability should see if their 
phone systems can do this.  Then you don't have to monitor it.
                        Dan



Robert Herron <robert.herron@gmail.com> 
Sent by: owner-bb@bb4.com 
05/26/2005 02:32 PM
Please respond to
bb@bb4.com 


To
bb@bb4.com 
cc

Subject
Re: {bb} Modem Not Answering?






Did anyone ever do this?  I have a similar need and was hoping to
leverage the work.


On 12/22/04, Trent Melcher wrote:
> From: Trent Melcher <tmelcher <at> trilogytel.com>
> Subject: RE: {bb} Modem Not Answering?
> Newsgroups: gmane.network.bb4.general
> Date: 2004-12-22 18:11:18 GMT (22 weeks, 1 day, 2 hours and 15
minutes 
ago)
> 
> Sure, this should be possible,  you should be able to script
something 
using
> minicom, if you dial a modem and it answers you will get back some
kind 
of
> an ACK from the modem, if not you should get back a NO ANSWER....
> 
> Did around on google probably something out there like this.
> 
> Trent
> 
> Trent Melcher
> Network/System Administrator
> Startouch International LTD.
> 
> > -----Original Message-----
> > From: owner-bb <at> bb4.com [mailto:owner-bb <at> bb4.com] On
Behalf 
Of
> > Shane Presley
> > Sent: Wednesday, December 22, 2004 10:59 AM
> > To: bb <at> bb4.com
> > Subject: {bb} Modem Not Answering?
> >
> >
> > Is there any way with BB to test that a modem does not answer?
> >
> > Basically we have a policy that says modems on our network
> > must be turned off, unless being used for support, and they
> > must be shut off when finished.
> >
> > So I want BB to dial a modem number, and if it receives a
> > modem answer, give a red alert.
> >
> > Sound possible?
> >
> > Shane
> > --
> >
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> > To unsubscribe from this list, or to subscribe to the
> > bb-digest list send e-mail to mailto:majordomo <at> bb4.com with
> > unsubscribe bb -and/or- subscribe bb-digest in the BODY of
> > the message.
> >
> 
> --
>
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> To unsubscribe from this list, or to subscribe to the bb-digest list
> send e-mail to mailto:majordomo <at> bb4.com with unsubscribe bb 
-and/or-
> subscribe bb-digest in the BODY of the message.
> 
> 
> --
> 
> 
> Robert Herron
> robert.herron@gmail.com 
> 


-- 


Robert Herron
robert.herron@gmail.com 

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.



--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.