How do I restrict VM's routing for toll fraud?

[clintf]

Noticed that our voicemail has been hacked and calls are being made thru our voicemail system.

How can i restrict these calls from being made ? Can i setup anything that only allows the routed calls to call certain numbers ? Or can i make it so you cant use the typical 1111 1234 for voicemail codes ?

 

[grcampb]

In Callpilot Manager, System Properties: check Enable Trivial Password Checking

We were hacked a while ago - check the following thread for more info:

http://tek-tips.com/viewthread.cfm?qid=1536636&page=1

 

[telcodog]

Remove Line Pool Access from all of your voicemail ports. Change every password in the system (especially the General Delivery and Sysem Manager mailboxes), check trivial password checking, force password change every 30 days. That's for starters.

Also restrict toll free calls to any pay conferencing companies (if they are using them, you will see the calls on your LD bill). If you aren't using dialup carriers, make sure there are none programmed in their either. Make sure you look very closely at users who have the ability to redirect calls too. It is common for an insider to forward their extension to "9" and then access it through the AA. Check for DISA programming.

These hackers know these systems extremely well so go through your programming with a fine tooth comb.

 

[clintf]

where do i check for DISA programming? sorry

 

[telcodog]

Assuming this is a 4.0 or a BCM50, you will find DISA under Telephony>Dialing Plan>Public Network. If there's something in there and you didn't put it there, get rid of it. While you're at it, check that Public Auto DN too.

If there's something in either field, go to Telephony>Call Security>Class of Service. If there's anything in there that you didn't program, get rid of it too.

Good Luck.

 

[coneil]

Turn off "outbound transfer" in class of service 1 for all mailboxes (if you are using class of service 1 for all your mailboxes). Turn off this option for Class of service 7 for mailbox 102. This is usually how they get into your system.

 

[clintf]

Thanks for all the help. Quick question is there a way to setup a restriction on all sets to not be able to call overseas ?

 

[Pats14]

To your overseas problem just create a filter that does not allow users to dial 011* (any) then apply that restriction to one ste then copy to the rest of the sets. I dont remember where that is in element manager though. probaly Configuration/sets/filters or restrictions