Our BCM 1000 was hacked...

[lyontl]

What defaults need to be turned off so that people can't call forward from our voice mail system. I changed all of the voicemail paswords to six digit, unusal numbers, but we are still getting hacked. Any help would really be appreciated.

 

[biv343]

Disable outbound transfer and off premise notification.

Remove access to the PSTN trunks from the voicemail ports (active application DNs).

If you need to use OPN/Outbound Transfer, build restriction filters and apply that filter to the voicemail ports. Add the numbers you need to be able to call as overrides to the filters.

Also, disable external initialization as well.

 

[hawks]

Build Restriction Filters and assign them to the voicemail DN. You can also build additional filters and assign to the lines. If you do not use 1010 codes then see if your carries can block this also.

 

[DigitelD]

Go into Reports and look at the Mailbox directory and look for any mailboxes that you are not using. The report will also show you the Off Premise Notification that is programmed for the mailbox. You may find a mailbox that has an OPN programmed for an international number. I have seen that before.

SHK Certified (School of Hard Knocks)

 

[lyontl]

I will check everything that you guys suggested. We do not use OPN/Outbound Transfer. Thanks for the help everyone!

 

[lyontl]

I had removed any mailboxes not in use yesterday, when I changed everyone's mailbox passwords to longer, more complex passwords.

 

[DigitelD]

You still need to check the OPN on ALL mailboxes.

SHK Certified (School of Hard Knocks)

 

[acewarlock]

What makes you think your being hacked?

 

[Megajd]

Make sure COS-7 doesn't have outbound transfer. It's default for mailbox 102 ( SysMgr) Most Customers don't change the password to something better than 1234.

 

[Runako]

I can remember there being a patch from Nortel for the NAM's and upgrading your software on the call pilot check to see if there is a toll patch for your version of the BCM.

 

[lyontl]

acewarlock

What makes you think your being hacked?

We were notified by our service provider of calls to the UK, Phillipines, Saudi Arabia, etc.

 

[lyontl]

biv343 (Vendor) 25 Sep 07 10:50
Disable outbound transfer and off premise notification.

Remove access to the PSTN trunks from the voicemail ports (active application DNs).

Also, disable external initialization as well.

That did it, thanks!