S A F E T Y A N D S E C U R I T Y P R E C A U T I O N S
C H A P T E R 2
15
ECOTEL 3G 16.1. Revised: 1 March 2011.
Config files:
Ip.cfg
pabx.cfg
route.cfg
2 . 7 C D R F I L E S
Call Detail Records are intended for analysis of the ECOTEL’s activity only. They are not designed to be used for
billing purposes, as it may occur that the times they record are not exact.
2 . 8 N E T W O R K S E C U R I T Y
Every day hackers develop new ways to break into systems through the Internet. While TELES takes great care to
ensure the security of its systems, any system with access through the Internet is only as secure as its user makes
it. Therefore, to avoid unwanted security breaches and resulting system malfunctions, you must take the following
steps to secure your ECOTEL if you connect it to the Internet:
Use an application gateway or a packet firewall.
To limit access to the ECOTEL to secure remote devices, delete the default route and add individual secure
network segments.
Access to the ECOTEL via Telnet, FTP or GATE Manager must be password protected. Do not use obvious
passwords (anything from
sesame
to your mother-in-laws maiden name). Bear in mind: the password
that is easiest to remember is also likely to be easiest to crack.
The firewall must support the following features:
Protection against IP spoofing
Logging of all attempts to access the ECOTEL
The firewall must be able to check the following information and only allow trusted users to access the ECOTEL:
IP source address
IP destination address
Protocol (whether the packet is TCP, UDP, or ICMP)
TCP or UDP source port
TCP or UDP destination port
ICMP message type
Inaccuracies in the generation of CDRs may occur for active connections if traffic is
flowing on the system while modifications in configuration or routing files are acti-
vated.
i
i
