NO JOY Wazo Unknown and Suspicious Devices

[PBXOK]

I have Wazo 17.01 running at Vultr with iptables running. Under Services>IPBX>IPBX Settings>Devices unknown devices keep appearing from 184.105.139.XX and 118.193.26.XX as "Device not configured" (Red ballon). How can I stop this from happening? Thanks!

 

[wardmundy]

Perhaps @Sylvain Boily can explain where these devices come from. They appear to be generated from Wazo itself.

 

[briankelly63]

California and China addrs's Could they be related to interfaces or drivers on the machine?

 

[Sylvain Boily]

Hello, It's because someone did a get on the http provisioning port. You could firewall the port 8667. List is documented here http://documentation.wazo.community/en/stable/contributors/network.html

 

[wardmundy]

@Sylvain Boily: 8667 already is blocked by IPtables but these devices continue to show up... so some other port or internal Wazo process is allowing them through. Private IP addresses are not firewalled. Here are the allowed ports in the Incredible PBX default WhiteList with IPtables:

-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 113 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
-A INPUT -p udp -m udp --dport 4569 -j ACCEPT
-A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 32976 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 4445 -j ACCEPT
-A INPUT -p udp -m udp --dport 123 -j ACCEPT
-A INPUT -p udp -m udp --dport 69 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 9022 -j ACCEPT
-A INPUT -p udp -m udp --dport 5353 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2000 -j ACCEPT
-A INPUT -p udp -m udp --dport 9486:9502 -j ACCEPT

 

[PBXOK]

Any updates on this? Still seeing these on Wazo 17.09.