Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Meet Me Conferecing toll fraud issue
- Thread starter PHins711
- Start date
- Thread starter
- #3
telnettech
Vendor
me tooo. give us details but change the names to protect the innocent or to protect your company against liability suits.......but give us the details.....i have 85 sites that use the avaya meet me conferencing system
To error is human.....if the machine doesnt work, then KICK IT !!!!!!!!!!!!!
To error is human.....if the machine doesnt work, then KICK IT !!!!!!!!!!!!!
What version of PBX? Do you use a vector routing table to verify the input in your meet-me vector? We are beginning to use meet-me more, if there's a danger of toll-fraud I would like to know about it. I can give you my email address if you don't want to post details.
Thanks
Thanks
98Converter
Technical User
Well, there is no host key - maybe thats the reference...?
Someone could use your conference bridge without you knowing it perhaps if they new the password.
But I think if you build it the way Avaya recommends, I'm not sure how you could enter a TAC if doesn't = the meet-me-access code...
I've just installed an EMMC Bridge. And we'll beging using that, so if there is a potential TF issue - I'd rather take the pro-active approach, rather than the reactive...
Thanks,
CJH
We are what we repeatedly do. Excellence, then, is not an act but a habit. ARISTOTLE 384-322 B.C.
Someone could use your conference bridge without you knowing it perhaps if they new the password.
But I think if you build it the way Avaya recommends, I'm not sure how you could enter a TAC if doesn't = the meet-me-access code...
I've just installed an EMMC Bridge. And we'll beging using that, so if there is a potential TF issue - I'd rather take the pro-active approach, rather than the reactive...
Thanks,
CJH
We are what we repeatedly do. Excellence, then, is not an act but a habit. ARISTOTLE 384-322 B.C.
youcandoit
Technical User
dial access direct to trunk should be turned off anyway and only active for testing puproses. no?
With all the MMC bridges I've set up, I just don't see how they can be used for toll fraud unless it's designed that way. The Vector guides every step of the process and if you don't enter the correct code you get disconnected, provided the vector is set up correctly. If the vector is set to, say, open up a trunk or divert a call if a certain code is entered, then it is an inside job and it is time to start evaluating who is doing the vector work on your switch.
Djplazma
is right on if built right it should give you 2 attempts
to enter correct code then disconnect and nothing else if created as just a mmc as for someone knowing your password I created vector that plays an announcemnet saying you have accessed a conference that is not scheduled and then hangs up ..the customer points any unused mmc vdn to this ...just as easy as changing the access code either way the customer knows how to do both
Focus9600
is right on if built right it should give you 2 attempts
to enter correct code then disconnect and nothing else if created as just a mmc as for someone knowing your password I created vector that plays an announcemnet saying you have accessed a conference that is not scheduled and then hangs up ..the customer points any unused mmc vdn to this ...just as easy as changing the access code either way the customer knows how to do both
Focus9600
Is there an automated way to change the PIN number of a MeetME Conferencing VDN?
If so please share. I have not looked into this to much but from what I found so far, there is not a way. Perhaps some genius vectoring or something may make it possible, just wondering what everyone else is doing. I am on a 2.1 CM
However if there is not a way, and you are like me with 1000 other things to worry about in a day, then I usually don't change the PIN right after the Conf call is completed. If there were some dishonest person that happens to participate on the conference call or even a dishonest employee that used that conference bridge that day etc, they might remember the Conf ID and PIN and later that night or whenever try to see if the conference bridge is still valid. If so then you might have problems.
Actually it might only be Toll fraud if you have an 800 number for your Meet Me Conferencing. Either way they are using your resources.
After I had our call accounting system installed, and before MeetME, I found a few different people that were having there families call in on our 800 number to the employee and then the employee just conferencing there family from all over the nation together for hours on our dime. If they do this then it’s just a mater of time before they might try the other.
If so please share. I have not looked into this to much but from what I found so far, there is not a way. Perhaps some genius vectoring or something may make it possible, just wondering what everyone else is doing. I am on a 2.1 CM
However if there is not a way, and you are like me with 1000 other things to worry about in a day, then I usually don't change the PIN right after the Conf call is completed. If there were some dishonest person that happens to participate on the conference call or even a dishonest employee that used that conference bridge that day etc, they might remember the Conf ID and PIN and later that night or whenever try to see if the conference bridge is still valid. If so then you might have problems.
Actually it might only be Toll fraud if you have an 800 number for your Meet Me Conferencing. Either way they are using your resources.
After I had our call accounting system installed, and before MeetME, I found a few different people that were having there families call in on our 800 number to the employee and then the employee just conferencing there family from all over the nation together for hours on our dime. If they do this then it’s just a mater of time before they might try the other.
- Status
Similar threads
- Question