On Wed, 1 Nov 1995, Edward Maillet wrote:
> Hey All,
> Some folks at work want to setup an ISDN dial-in connection relying
> solely on the inbound caller ID as the security measure. Is it possible
> to spoof the D channel to send fake info? I'm fairly certain there is
> a way to do it. Can anyone point me to some references so I can make a
> decent technical argument agaisnt this?
> Thanx.
>
> ----- Ed Maillet
> maillet @
cs .
usm .
maine .
edu
>
>
Well since neither the caller id info nor the CLID are generated by any
on premise equipment -- the only thing you would have to worry about is
someone playing switch pranks...and even then I dont think you could
''spoof'' a circuit since a bri's cid is its ''phone number'' which is
the broadcast ascii string.
And I dont believe the switch will pass clid packets straight through
anyway, even if you did come up with someway to generate them on premise.
So -- my answer would be no, not by any technical means that I can think of.
Jim McBride
jim @
basic .
net
References:
-
Spoofing ISDN
From: Edward Maillet <maillet @
doc .
cs .
usm .
maine .
edu>
|
|