Solved

Shoretel Voicemail Boxes

Posted on 2014-02-04
4
433 Views
Last Modified: 2014-02-24
Does anyone know what the option is within the COS or individual mailboxes themselves in order to stop the ability to dial in and then make a call out/externally?

thanks
0
Comment
Question by:CHI-LTD
  • 3
4 Comments
 
LVL 17

Accepted Solution

by:
JRSCGI earned 500 total points
Comment Utility
The ShoreTel system does not support any direct ability to dial into a mailbox and then dial an outside telephone number.  They deliberately do not include that feature due to its potential abuse for toll fraud.  What is supported are a couple possible ways the system could be abused:
1.  If the feature is turned on, a user can have the system call back someone that has left a voice mail message.  Thus, I could call into an unassigned mailbox, leave a voice mail, and then anyone that retrieves that message can press "5" (to reply) and one of the subchoices is to reply with a call back -- it will dial the number pulled from the caller-ID.
2.  If someone has hacked an unassigned user account, then incoming calls to that DID can be directed off site by using the call-forwarding feature and then putting the phone in the proper call handling mode.  However, I am not sure how someone could set that up just by dialing in since the forwarded to number is typed in through the Personal Call Manager or the Administrator.
0
 
LVL 1

Author Comment

by:CHI-LTD
Comment Utility
According top some of the logs i have been shown it would appear that one of the DID numbers at site b that is assigned to a user primarily based at site a was hacked, or at least made calls from..
(now unsure where these DID/site-b numbers are in the system now).

They initially suggested a mailbox but don't believe it has been this hacked.
Also they have now had to barr international calls...
0
 
LVL 1

Author Comment

by:CHI-LTD
Comment Utility
0
 
LVL 1

Author Closing Comment

by:CHI-LTD
Comment Utility
The hack was to do with tandem trunking being enabled...
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

I recently purchased a Bluetooth headset called the Music Jogger (model BSH10). The control buttons on it look like this: One of my goals is to use it as the microphone and speakers for Skype calls. In that respect, it works well. However, I …
Almost all Internet protocol telephones have built-in switches at the back that allow you to connect your personal computer to one port and use the other port to connect your phone to to a Cisco switch.   Why we need to connect the PC to the pho…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now