Flash Voicemail Hacked 1

[nuttyone]

I have a customer being hacked but I am having trouble eliminating problem
The voicemail ports have restrictions now of *, 1 with 800 overrides, 0
The hackers are still getting in nightly.
Any way to eliminate?

 

[joelunchpail]

an override of 0 allows 0 plus dialing or 00 international
do you have any reason to allow the voicemail to dial out at all?
I used to always restrict 0 1 *67 *70 * plus any default restrictions 800 900 etc plus each every remaining number. If you have to dial out through the voice mail ports put in the local area codes as an exception.
put the restrictions on each and every voice mail port

put that restriction on your set and spend some time trying to dial out to test.

 

[Firebird Scrambler]

It might also be wise to force all users to reset their mailbox passwords.


Firebird Scrambler
Nortel Meridian 1 / Succession and BCM / Norstar Programmer in the UK
Advance knowledge on BCM support

http://www.linkedin.com/in/davidbromley

 

[nuttyone]

Thanks Guys - I had thought that only the callpilots were being hacked through Outdial option.
It seems that the Flash voicemails can be hacked without Outdial option - only Message notification option.
Also I found that the System Manager mailbox had been hacked as well and message notification was pointed to an African number.
Thanks again

 

[joelunchpail]

Also be sure to

Disable the "enable external initialization" feature in COS

see: faq 799-7271

 

[hawks]

I also build another filter blocking Pick Codes (101) and put it on the lines.