<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="ltr" class=""><font face="Helvetica" size="2" class="">There are a few improvements Australian telcos could really do with putting in.. <a href="https://en.wikipedia.org/wiki/STIR/SHAKEN" class="">STIR/SHAKEN</a> for caller ID spoofing is one.. ENUM is another that I think would be useful[1] (they did a trail about 15 years ago now[2] and, well, we don't use ENUM - so that tells you how that went)</font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class=""><br class=""></font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class="">I was surprised to see Telstra in the news for blocking spam/scam calls the other day.. They might be making improvements, yes - but we are still behind globally on this</font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class=""><br class=""></font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class="">Side note: is there anything like AusNOG but for telco? And/or any forums/sites/mailing lists where people from the Australia telco industry discuss telco topics? AusNOG and this guys blog are probably the only places I've seen/heard anyone discuss the telco industry (if you want to know how number porting works at all - short from reading the actual rules/laws - that blog has a some great details (<a href="https://nickvsnetworking.com/anatomy-of-local-number-portability-in-australia/" class="">link</a> <a href="https://nickvsnetworking.com/more-porting-notes/" class="">link</a>)) </font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class=""><br class=""></font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class="">[1] I see ENUM as potential to assist/solve the fact that you have a single point of failure for inbound carriage.. If you have a TFN that can send calls between multiple telcos, then the TFN is the single point of failure.. Wouldn't be bad if porting becomes easier as a result of ENUM either..</font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class="">[2] There are many dead links on the internet about this trail.. These [<a href="https://lists.ripe.net/pipermail/enum-wg/2005-May/000326.html" class="">3</a>][<a href="http://www.rogerclarke.com/DV/ENUM0507.html" class="">4</a>] are the ones that I could find that work/had anything mildly interesting, and pointed me in the direction of Vince Humphries from ACMA who was able to provide some more insight into the trail (which I haven't completely read yet, but thank you Vince if you're out there!)</font></div><div dir="ltr" class=""><font face="Helvetica" size="2" class=""><br class=""></font></div><div><br class=""><blockquote type="cite" class=""><div class="">On 21 Feb 2021, at 9:35 pm, Tim Dooley <<a href="mailto:tim.dooley@outlook.com" class="">tim.dooley@outlook.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252" class="">
<div class="">
<div dir="auto" style="direction: ltr; margin: 0px; padding: 0px; font-family: sans-serif; font-size: 11pt;" class="">
Mind if I ask when this was, and who your au provider was? I know Telstra are properly restrictive<span id="ms-outlook-android-cursor" class=""></span><br class="">
<br class="">
</div>
<div dir="auto" style="direction: ltr; margin: 0px; padding: 0px; font-family: sans-serif; font-size: 11pt;" class="">
<span id="OutlookSignature" class="">
<div dir="auto" style="direction: ltr; margin: 0px; padding: 0px; font-family: sans-serif; font-size: 11pt;" class="">
Get <a href="https://aka.ms/ghei36" class="">Outlook for Android</a></div>
</span><br class="">
</div>
<hr style="display:inline-block;width:98%" tabindex="-1" class="">
<div id="divRplyFwdMsg" dir="ltr" class=""><font face="Calibri, sans-serif" style="font-size:11pt" class=""><b class="">From:</b> Damien Gardner Jnr <<a href="mailto:rendrag@rendrag.net" class="">rendrag@rendrag.net</a>><br class="">
<b class="">Sent:</b> Sunday, February 21, 2021 8:05:23 PM<br class="">
<b class="">To:</b> Jake Anderson <<a href="mailto:yahoo@vapourforge.com" class="">yahoo@vapourforge.com</a>><br class="">
<b class="">Cc:</b> AusNOG Mailing List <<a href="mailto:ausnog@ausnog.net" class="">ausnog@ausnog.net</a>>; Mark Andrews <<a href="mailto:marka@isc.org" class="">marka@isc.org</a>>; Tim Dooley <<a href="mailto:tim.dooley@outlook.com" class="">tim.dooley@outlook.com</a>><br class="">
<b class="">Subject:</b> Re: [AusNOG] "Telstra" scammers</font>
<div class=""> </div>
</div>
<div class="">
<div dir="auto" class="">At ${job-1}, we had a bunch of VOIP services at offices in AU, NZ, US, GB, IE. AU was the ONLY place where we could present ANY caller ID we wanted. Everywhere else our VOIP provider required a copy of our phone bill proving we owned the phone
numbers we wanted to present as caller ID, if we had not ported those numbers to the VOIP provider. And that had to be refreshed every 12 months.</div>
<div dir="auto" class=""><br class="">
</div>
<div dir="auto" class="">It’s always blown me away how loose .au is on handling spoofing on phone services.</div>
<div dir="auto" class=""><br class="">
</div>
<div dir="auto" class="">—DG</div>
<div dir="auto" class=""><br class="">
</div>
<div class="">
<div class="x_gmail_quote">
<div dir="ltr" class="x_gmail_attr">On Sun, 21 Feb 2021 at 9:00 pm, Jake Anderson <<a href="mailto:yahoo@vapourforge.com" class="">yahoo@vapourforge.com</a>> wrote:<br class="">
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left-width:1px; border-left-style:solid; padding-left:1ex; border-left-color:rgb(204,204,204)">
You know how pretty much everybody seems to have implemented spoofing <br class="">
controls on IP's exiting their networks?<br class="">
People need to get on that for the phone side (whilst yes exceptions <br class="">
should be allowed you really should need to prove it's your number). If <br class="">
it needs regulation to force it then so be it.<br class="">
<br class="">
Also, I ask them if their mother knows they are criminals trying to <br class="">
steal from old ladies.<br class="">
They get very upset by this as a rule.<br class="">
<br class="">
My 95 year old grandmother is still getting 3-5 "nbn your phone will be <br class="">
disconnected at midnight" calls per week.<br class="">
<br class="">
<br class="">
On 19/02/2021 7:54 am, Mark Andrews wrote:<br class="">
> Well at least with the NBN rollout basically done I haven’t heard from “Nicole from NBN”<br class="">
> saying my phone is going to be cut off if I don’t do something in a while.<br class="">
><br class="">
> Whats needed is a simple way to report “the last call to this line was a scam” so the<br class="">
> calls can be traced back to their source along with a legislated requirement to follow<br class="">
> the call trail back to its source. I get several calls like this a day from<br class="">
> “Telstra NBN”, “Mastercard Visa”, “E-Bay and suspicious iPhone purchase”, etc. It’s<br class="">
> so common that my wife looks at the caller-id and says “It’s your girlfriend calling<br class="">
> again” from the number of times Nichole called.<br class="">
><br class="">
> Unfortunately I need to field calls from unknown numbers for new members for Scouts, etc.<br class="">
><br class="">
> I’ve even had them callback and ask why I hung up on them. They really don’t like it when<br class="">
> I call the “crooks”, “criminals”, “scammers” etc.<br class="">
><br class="">
> Mark<br class="">
><br class="">
>> On 18 Feb 2021, at 21:50, Tim Dooley <<a href="mailto:tim.dooley@outlook.com" target="_blank" class="">tim.dooley@outlook.com</a>> wrote:<br class="">
>><br class="">
>> While telecom companies such as Telstra are required to limit outbound calls from their SIP Trunks (ensuring you own the number you're trying to present), there are "IT" companies which offer SIP trunks without being a telco, this means they do not have
to follow the same guidelines.<br class="">
>><br class="">
>> Just 2 days ago I became aware of a scammer presenting a school's main number on outbound calls, being part of the team supporting the schools phone system I can guarantee the system wasn't hacked at all.<br class="">
>> There was no traffic from the school's phone system to Telstra during the time of the scam calls, however plenty of angry people were calling back yelling at the admin staff.<br class="">
>><br class="">
>> so basically yes, a VoIP seller (yet not an official telco) putting zero security on the calling number.<br class="">
>><br class="">
>> Cheers,<br class="">
>> Tim<br class="">
>><br class="">
>> From: AusNOG <<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank" class="">ausnog-bounces@lists.ausnog.net</a>> on behalf of Darren Moss <<a href="mailto:Darren.Moss@cloud365.com.au" target="_blank" class="">Darren.Moss@cloud365.com.au</a>><br class="">
>> Sent: Thursday, 18 February 2021 3:45 PM<br class="">
>> To: Bradley Amm <<a href="mailto:brad@bradleyamm.com" target="_blank" class="">brad@bradleyamm.com</a>>; AusNOG Mailing List <<a href="mailto:ausnog@ausnog.net" target="_blank" class="">ausnog@ausnog.net</a>><br class="">
>> Subject: Re: [AusNOG] "Telstra" scammers<br class="">
>> <br class="">
>> How are they making calls into AU mobile networks ?<br class="">
>> <br class="">
>> Surely they need a SIP service as a starting point.<br class="">
>> <br class="">
>> Is it a VoIP seller not performing checks ??<br class="">
>> <br class="">
>> <br class="">
>> Darren.<br class="">
>> <br class="">
>> <br class="">
>> From: AusNOG [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank" class="">ausnog-bounces@lists.ausnog.net</a>] On Behalf Of Bradley Amm<br class="">
>> Sent: Thursday, 18 February 2021 3:42 PM<br class="">
>> To: <a href="mailto:ausnog@ausnog.net" target="_blank" class="">ausnog@ausnog.net</a><br class="">
>> Subject: Re: [AusNOG] "Telstra" scammers<br class="">
>> <br class="">
>> Unfortunately not a lot can be done<br class="">
>> I had a similar call today. Just blocked the numbers.<br class="">
>> Probably a spoofed number as well<br class="">
>> <br class="">
>> <br class="">
>> From: AusNOG <<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank" class="">ausnog-bounces@lists.ausnog.net</a>> On Behalf Of Kai<br class="">
>> Sent: Thursday, 18 February 2021 12:34 PM<br class="">
>> To: <a href="mailto:ausnog@ausnog.net" target="_blank" class="">ausnog@ausnog.net</a><br class="">
>> Subject: [AusNOG] "Telstra" scammers<br class="">
>> <br class="">
>> Just had a scam call from a female operator, called from "0432 594 523" (probably a spoofed number), says her name is Selina from Telstra, that my modem has a virus. She gave her Telstra staff ID as C0527 (that's not a real Telstra staff ID, it starts with
a 0 and it's too short) and hung up when I asked what her Team Leader or Manager's name and staff ID is.<br class="">
>><br class="">
>> So the "Telstra scammers" are still out there, trying to scam people.<br class="">
>> Parasites.<br class="">
>> <br class="">
>> Sent from my smartphone.<br class="">
>> _______________________________________________<br class="">
>> AusNOG mailing list<br class="">
>> <a href="mailto:AusNOG@lists.ausnog.net" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
>> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">
http://lists.ausnog.net/mailman/listinfo/ausnog</a><br class="">
<br class="">
<br class="">
_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank" class="">AusNOG@lists.ausnog.net</a><br class="">
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank" class="">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br class="">
</blockquote>
</div>
</div>
-- <br class="">
<div dir="ltr" class="x_gmail_signature">
<div dir="ltr" class=""><p class="">Damien Gardner Jnr<br class="">
VK2TDG. Dip EE. GradIEAust<br class="">
<a href="mailto:rendrag@rendrag.net" target="_blank" class="">rendrag@rendrag.net</a> - <span class=""><a href="http://www.rendrag.net/" target="_blank" class="">http://www.rendrag.net/</a><u class=""><br class="">
</u></span>--<br class="">
We rode on the winds of the rising storm,<br class="">
We ran to the sounds of thunder.<br class="">
We danced among the lightning bolts,<br class="">
and tore the world asunder</p>
</div>
</div>
</div>
</div>
_______________________________________________<br class="">AusNOG mailing list<br class=""><a href="mailto:AusNOG@lists.ausnog.net" class="">AusNOG@lists.ausnog.net</a><br class="">http://lists.ausnog.net/mailman/listinfo/ausnog<br class=""></div></blockquote></div><br class=""></body></html>