<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">Hi Ahh so its basically DMark or Dkim but for phone numbers.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">It actually looks like a good system.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">If a few major providers rolled this out in Australia Telstra would eventually be forced to.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">While they are at it Telstra could get rid of zones for phone numbers as well it’s Voip so its all internet based now a days anyway so you should be able to move numbers more easily
oh and they should let you split numbers from a 100 range as well, like the majority of providers.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">Well they might still have some legacy PSTN services in regional areas but most of those have been switched.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">Regards Chad.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">Chad Kelly <o:p></o:p></p>
<p class="MsoNormal">Manager <o:p></o:p></p>
<p class="MsoNormal">CPK Web Services <o:p></o:p></p>
<p class="MsoNormal">Phone 03 52730246<o:p></o:p></p>
<p class="MsoNormal">Web https://www.cpkws.com.au<o:p></o:p></p>
<p class="MsoNormal"><img width="107" height="38" style="width:1.1145in;height:.3958in" id="Picture_x0020_1" src="cid:image001.jpg@01D8362A.6F5C0EA0"><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Rob Thomas <xrobau@gmail.com>
<br>
<b>Sent:</b> Saturday, 12 March 2022 1:04 PM<br>
<b>To:</b> Sean Agius (Personal) <sean@agius.id.au><br>
<b>Cc:</b> Nathan Brookfield <Nathan.Brookfield@iperium.com.au>; Chad Kelly <chad@cpkws.com.au>; AusNOG Mailing List <ausnog@ausnog.net><br>
<b>Subject:</b> Re: [AusNOG] "Telstra" scammers still at it...<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">This is TRIVIALLY solvable by Australia implementing SHAKEN/STIR, which is a very simple JWT based assertion of Caller.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://stir.tel" target="_blank">https://stir.tel</a> has all the info.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In fact, I have a POC Certificate Authority in place for Australia, and written most of the code for a complete attestation and verification system, which is, or soon will be, open sourced as the reference code for the standard.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Sadly, Telstra would have to move into the 2000s and stop requiring ISDN/SS7 for peering, and move to SIP, like the rest of the world.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Sat, 12 Mar 2022, 9:00 am Sean Agius (Personal), <<a href="mailto:sean@agius.id.au" target="_blank">sean@agius.id.au</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<p class="MsoNormal">The proposed implementation by Telstra is flawed. For example, PBX systems that use any type of forward (Sim ring/Unconditional etc.), will be affected by the dropping of that call (If the call forward target is on the Telstra network);
unless the forwarded call CLI is presented as Calling Party B. A lot of our clients prefer to know who is calling them, rather than their own business DID. If authorisation was done on PAI, then Diversion, then Calling Number, then there is enough data to
backtrack to the root network(s) that allowed the spam/scam call to take place.<br>
<br>
As stated, there will be a general consensus to avoid Telstra if/when this gets implemented and starts affecting legitimate use case scenarios.<br>
<br>
Regards, Sean.<br>
<br>
-----Original Message-----<br>
From: AusNOG <<a href="mailto:ausnog-bounces@ausnog.net" target="_blank">ausnog-bounces@ausnog.net</a>> On Behalf Of Nathan Brookfield<br>
Sent: Wednesday, 9 March 2022 8:08 PM<br>
To: Chad Kelly <<a href="mailto:chad@cpkws.com.au" target="_blank">chad@cpkws.com.au</a>><br>
Cc: <a href="mailto:ausnog@ausnog.net" target="_blank">ausnog@ausnog.net</a><br>
Subject: Re: [AusNOG] "Telstra" scammers still at it...<br>
<br>
Nope it won’t and that’s not what it’s doing, it’s the opposite…. You can use Telstra CLI’s on other networks without an issue :(<br>
<br>
It’s going to cause a massive cluster that’s for sure but I don’t believe it will solve much SPAM calling.<br>
<br>
They’ll just avoid Telstra :(<br>
<br>
On 9 Mar 2022, at 19:48, Chad Kelly <<a href="mailto:chad@cpkws.com.au" target="_blank">chad@cpkws.com.au</a>> wrote:<br>
<br>
Hi Just on this, the Telstra preventing CLIRs I am pretty sure this will prevent the scammers from using any Telstra numbers.
<br>
From what I understand the changes will prevent the use of Telstra numbers being used as caller IDs from outside of their network, previously the scammers have been able to use random mobile numbers they have found on the internet as the caller ID this will
no longer be permitted on the network level once these changes go through. <br>
I understand from an ISP point of view that the only exception to this will be approved port out requests where Telstra has signed paperwork from the gaining ISP to say the customer has approved to port their number out.
<br>
From how I understand this is being rolled out all other requests to make outbound calls from random Telstra numbers will be blocked at the network level.<br>
Unless the number is on a Telstra account. <br>
This should help significantly with cutting down the amount of scam calls.<br>
<br>
Regards Chad. <br>
<br>
From: Shaun Deans <<a href="mailto:shaun@kadeo.com.au" target="_blank">shaun@kadeo.com.au</a>><br>
To: Rob Thomas <<a href="mailto:xrobau@gmail.com" target="_blank">xrobau@gmail.com</a>><br>
Cc: "<<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>>" <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
Subject: Re: [AusNOG] "Telstra" scammers still at it...<br>
Message-ID:<br>
<<a href="mailto:CA%2BkVNc811wfDMqREiwoK%2BZkZnqMoQgNnkwbeO4n6_23v_bhw0Q@mail.gmail.com" target="_blank">CA+kVNc811wfDMqREiwoK+ZkZnqMoQgNnkwbeO4n6_23v_bhw0Q@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Random thought experiment... as both someone who's worked in carrier networks and in software what ponders me is...<br>
<br>
If my Google Phone app can detect a scammer and tell me before I answer why can't a carrier (source or destination) ?<br>
<br>
I understand Google has a massive dataset which the humans feed (for<br>
"free") every day. But I'm sure they just live to offer a service to carrier's for 'extreme scammers' back to carrier's. I understand the CLIR is faked but logs would show it originating.<br>
<br>
But as someone else said the scammers' will still pay for the calls. ?<br>
<br>
The current projects stopping of overstamping CLIRs outside the network coming back inbound will help immensely.<br>
<br>
As someone with experience on both sides (Net & Dev) I'd love to geek out pro-bono on a project.<br>
<br>
That said I'm sure Telstra has smarter gals & guys than me trying to crack the code.<br>
<br>
Just 2c<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@ausnog.net" target="_blank">AusNOG@ausnog.net</a><br>
<a href="https://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">https://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</body>
</html>