Fraudulent Calls Being Made Through VM Call Pilot

[PowerSurger]

How can you block fraudulent calls being made into your VM system? Think someone might have called into our BCM/Call Pilot possibly accessed an ext and made some overseas calls. What feature can be turned off that will not allow this? I have asked that no one have vulnerable passwords onsite and make sure their passwords are at least 6 digits. Any help is appreciated.....

Thanks!

 

[hawks]

Build a Restriction Filter that blocks any numbers you don't want dialed and assign that Filter to the voicemail DN's. Also if you do not use pick codes (101) then let your carrier know that so they will not allow them.

 

[imapirate]

also, you might want to lock down the ports by going into the call pilot/configuration/system properties and changing the "max outcalling channels) to 0.

the drawback to this is that you will be able to do outdial notification or even call a set to make recordings. but, if you are the adminstrator, you can toggle on/off as you go.

hope this helps - still use what hawks said with the filter.

 

[Sparkie37]

Plus check to see that each Mailbox does NOT have any outdial assigned to it.
If this is a necessary requirement then the above recommendation should apply.
Another option is the have your telephone Line Provider to give you account codes for any long distance calls.

 

[PowerSurger]

Thanks guys! I see in the system that one particular ext was used apparently as placing a call to Somolia. It shows the ext and also say "transfer". Looks like an outbound transfer was made. I went ahead and disabled that feature.

 

[BetaTech5]

Dont forget to add '*' and 310AAAA to the filter. Some provider features start with '*' and give return dial tone.

Some aftermarket longdistace providers are accessible with 310 XXXX numbers.

Best way to prevent this is to make sure passwords are 6 digits or better and edit the Class of service table and turn off outbound transfer on all ext that don't need it and set the Max Incorrect Password Attempts to 4.

Have Fun!

 

[oldestgeek]

Get your LD provider to require long pin numbers for toll calls and your golden. I had a customer that had about a hundred users and were using 4-digiy pins. Let's see, that would be a one in one hundred chance of a hacker guessing a pin correctly on each attempt - odds too low for me. Go with a 6-digit or higher pin. As a bonus, if your provider provides detailed billing, using the pin numbers you can track who's making calls to whom within your org., even without CDR.