Critical Linux Vulnerability Alert: Poodle

A new critical exploit has been announced in the form of a vulnerability of a legacy encyption implementation, SSLv3.  The POODLE bug exploits an older encryption protocol and may allow a hacker to gain access to a secure session between a client and server utilizing SSLv3.  More info on Poodle can be found here:

https://www.us-cert.gov/ncas/alerts/TA14-290A

This flaw in SSLv3 may allow hackers to gain access to encrypted information such as HTTP cookies used in the session via a man-in-the-middle attack.

This vulnerability is not as critical as Shellshock or Heartbleed as attackers cannot exploit this flaw remotely. However, it is important to fix this issue as it could put sensitive data at risk of being exposed. Resolving this issue is also required for PCI compliance.

This attack requires both the client and the server to be using SSLv3 in order to be exploited.  The easiest way to protect yourself is to upgrade one or both ends of the connection.  On the client side, the only browser that still does not support TLS is Internet Explorer 6.  Fixing this bug will effectively leave IE6 users out in the cold, security-wise.  Modern browsers have the capability to turn off SSLv3 connections.  See: http://www.tomsguide.com/us/poodle-fix-how-to,news-19775.html

You can test your site to see if it is vulnerable to the POODLE bug at: https://www.poodlescan.com/

All Pantek Support Engineers have been advised of this issue, and trained in the appropriate response procedure. If you would like our assistance in determining if your server has been affected, or to fix the vulnerability, please open a Support Ticket via the Pantek Portal: https://portal.pantek.com/clientarea.php

Pantek Clients who have purchased a Managed Service Plan will receive a separate notification, as management of these third-party security issues is included without incurring extra charges.

You can find more details on our Managed Service Plans here:  http://www.pantek.com/managed

Slash Your Business Phone Bill With VOIP – Part 2

In the first blog we provided an introduction to VoIP, providing some basic information about using VoIP phone services. In Part 2, we’ll walk through opening an account with Pantek’s VOIP system and configuring a smartphone app for use with the account.

Opening a Pantek VOIP Account

To open an account, visit http://voip-signup.pantek.com. You’ll be asked for your name, email and other information, and how much money you’d like to add to your account. This can be as little as $35. There is no signup fee, and there’s a money-back guarantee on the initial deposit for new accounts.

Create a Sub Account

The first time you log in to your new account, you’ll be asked to create a sub account. Sub accounts are a convenient way to keep multiple users on the same account separated. Choose a name for the sub account. This will be the user name that gets entered into the smartphone app, IP phone, or analog adapter. Next choose a password, then set the ‘Caller ID Number’. This is what will appear on the caller ID display of the person you call. We’ll choose ‘Yes’ for ‘NAT’ which is the most common. Finally, click ‘Add Account’. The screen will refresh, then display the server settings appropriate for the new sub account, for example Register Server: inbound.sip-provider.net. We’re now ready to configure our smartphone app.

Configure your Smartphone App

Zoiper is one of many free VOIP apps and is available for most types of smartphones. Let’s use Zopier as an example:

– After installing Zoiper, tap ‘Config’ then ‘Accounts’ then ‘Add account’.
– Answer ‘Yes’ to the ‘Do you already have an acct ?’ question
– Then click ‘Manual configuration’. Choose ‘Sip’, then enter:

Account name:              Pantek VOIP     (or anything you wish)
Host:                             inbound.sip-provider.net:5060
                                     (this was displayed when the sub account was created)
Username:                   The name you chose for your sub account
Password:                    The password you chose for the sub account.

and that’s it. You should now be able to dial a phone number from the Zoiper app!

Configure a new Number for Inbound Calls

If you’d like to receive calls on your Zoiper app, simply purchase a phone number (sometimes called a DiD) from your Pantek VOIP account. You can also chose to move an existing phone number such as your business phone number to your Pantek VOIP account.

– Under ‘My Products & Services’, click ‘My Numbers’, then ‘All’.
   You’ll see the new number along with any others.
– From the dropdown in the ‘Action’ column, select ‘Routing Method’.
   We’ll choose ‘SIP’ for the protocol and ‘ATA Device…’ for ‘Type’.

This choice is for end-user devices such as soft/hard phones or analog adapters
(ATAs) or smartphone apps.  If instead the number will be used on an Asterisk or FreePBX server we’d choose ‘PBX Server…’.

– Again we click ‘Next’ and see a list of sub accounts.
   We’ll check the box next to the sub account that we created earlier and click ‘Next’.
– You’ll see a final confirmation page. Click ‘Submit’.

The number is now ready to use. If you call the number from any phone, your smartphone app will ring.

Summary

Taking advantage of the cost savings made possible by VoIP is easy and takes just a few minutes. In this Blog, we discussed setting up a simple smartphone app for use with your Pantek VOIP account, but there are many more possibilities. Using our services you can also allow SMS messages to be sent and received over VOIP so that your customers can contact you by sending a text to your VOIP phone number. Faxing over VOIP is another available feature.

We can also help you set up a complete VOIP-based PBX phone system for your business which includes extensions, voicemail and many other features. Contact the experts at Pantek to discuss the many ways that your business can benefit from VOIP technology by either calling us at: 877-546-8934 (international: 216-344-1614) or sending us an information request (http://www.pantek.com/contact.php?subsect=more).

Slash Your Business Phone Bill With VOIP

If your business is using traditional phones lines, your monthly bill can get quite high… especially if you have multiple lines, provide a toll-free number for customers to call in on, or if you place international calls. Substantial savings are possible by switching to VOIP for some or all of these services, and now-a-days you can be up and running in just a few minutes.

Types of Phones

Because VOIP is a digital technology while traditional phone service (called POTS) is analog, different types of phones are required for VOIP. Adapters are available which allow analog phones to work with VOIP;they cost as little as $30. Another option is a no-cost software phone which is a program or app which runs on a smartphone or computer. Digital phones (called IP phones) are another good choice and are commonly used in offices.

Advantages and Limitations of VOIP

Using VOIP, calls can be made anywhere in the world over the Internet at no cost. For example, a business may have one office in the U.S. and another office in different country. Unlimited free calls can be made between these offices as long as each has an internet connection. To make calls to regular phone numbers using VOIP however, you’ll need an account with an ITSP (Internet Telephone Service Provider). Many such providers exist and most offer rates which are substantially lower than those from traditional phone services.

One potential disadvantage of VOIP is that call quality can be negatively affected if used over a slow or overloaded internet connection. In such cases there are measure which can help, but having a good internet connection is the best way to achieve good voice quality.

Getting Started

Once you’ve opened an account with an ITSP, you’ll be provided with a set of credentials which are then used to configure your VOIP device (sometimes called ‘SIP client’), for example a smartphone app, digital phone, or analog phone adapter. You’re then ready to use the new service and enjoy the cost savings!

 

Please Note: Pantek offers a wide range of VOIP services, and also supports popular open-source VOIP applications such as Asterisk and FreePBX. We can also assist with the configuration of many VOIP devices at our standard consulting rates. Part 2 of this blog will discuss opening a Pantek VoIP account.