web statisticsweb stats

Business Phone Systems

Previous Thread
Next Thread
Print Thread
Rate Thread
Page 1 of 2 1 2
Joined: Jun 2004
Posts: 4,552
Moderator-Comdial, ESI, Voicemail, Cisco
OP Offline
Moderator-Comdial, ESI, Voicemail, Cisco
Joined: Jun 2004
Posts: 4,552
Did anyone else notice any problems with Comdial's latest bulletin regarding toll fraud in VM? Some of the instructions didn't quite seem correct. I emailed Comdial Tech Support about it, but have received no response, and the bulletin is still there, as-is. Maybe it's just me...

Atcom VoIP Phones
VoIP Demo

Best VoIP Phones Canada


Visit Atcom to get started with your new business VoIP phone system ASAP
Turn up is quick, painless, and can often be done same day.
Let us show you how to do VoIP right, resulting in crystal clear call quality and easy-to-use features that make everyone happy!
Proudly serving Canada from coast to coast.

Joined: Mar 2001
Posts: 3,268
Moderator-Allworx, Nisuko-Tie, Vodavi
Offline
Moderator-Allworx, Nisuko-Tie, Vodavi
Joined: Mar 2001
Posts: 3,268
5Y&C:
I just took a look at it and didn't see anything odd. What is it that you found to be "not correct"? Maybe it's me--not you...

Joined: Jun 2004
Posts: 4,552
Moderator-Comdial, ESI, Voicemail, Cisco
OP Offline
Moderator-Comdial, ESI, Voicemail, Cisco
Joined: Jun 2004
Posts: 4,552
The part where it tells you to turn on outdial allowed in class of service. I can understand turning it on on the Line Information screen, but not in class of service. Doing so in class of service would allow a user (or malicious intruder) to log into a mailbox, press zero to make an outbound call, then dial the number and away they go. That kind of goes against the concept of preventing toll fraud. What it sounded like to me was that they meant to instruct you to turn it on on the Line Info screen, as this would be required for notification. Am I off base here, based on their instructions?

Joined: Mar 2001
Posts: 3,268
Moderator-Allworx, Nisuko-Tie, Vodavi
Offline
Moderator-Allworx, Nisuko-Tie, Vodavi
Joined: Mar 2001
Posts: 3,268
5Y&C:

Here is what they say:
******************
5. COS Create #1 and verify ‘Out Dial Allowed’ is set to “NO.”
6. Change the prototype mailbox to use COS 1.
7. Create COS #2 and set ‘Out Dial Allowed’ to “Yes” for those mailboxes that will need to use message delivery.
******************
# 5 allows NOo mailbox that is COS 1 to grab a line & dial out for any reason
# 7 allows COS 2 to outdial--this COS would only be for those who have pagers etc.

As far as I know (and I may be wrong here)--the "Outdial" option in Line Setup allows what ports are to be used for MW notification and outdialing---in otherwords which ports do you want to have the capability of doing that.

I think that they are saying that doing "outdials" from the mailbox is a weak security issue, possibly---but the other points that they mention, make the mailboxes more secure (passwords etc.) I think the term "message delivery" is somewhat misleading and should be "pager notification" or something like that.

Does this make any sense??

Joined: Jun 2004
Posts: 4,552
Moderator-Comdial, ESI, Voicemail, Cisco
OP Offline
Moderator-Comdial, ESI, Voicemail, Cisco
Joined: Jun 2004
Posts: 4,552
What I am saying is that "outdial allowed" in class of service is not required for message notification (message delivery to cell phone) or pager notification. It would only be required in the Line Info screen. That is why I am calling this incorrect. The way I am reading the bulletin, they are actually opening up more of a vulnerability. We always keep outdial allowed disabled in class of service, specifically for the purpose of preventing toll fraud. on every system with this disabled, we still have functional message and pager notification, because there are ports enabled for outdial in the Line Info screen.

Last edited by 5years&counting; 08/25/17 03:35 AM.
Joined: Mar 2001
Posts: 3,268
Moderator-Allworx, Nisuko-Tie, Vodavi
Offline
Moderator-Allworx, Nisuko-Tie, Vodavi
Joined: Mar 2001
Posts: 3,268
OK...I stand corrected. I had always thought that you had to allow the MB to outdial for pager notification. I'll have to read the manuals again on this. It says--"This field indicates whether the owner of a mailbox belonging to this class of service is allowed to place outgoing calls from the mailbox." I had always read "outgoing calls" to mean "outgoing page notification" If you are getting pager notification without that being allowed, then it must be for something else. So, again, the "Message Delivery" phrase seems to be somewhat hazy in my mind. Let's see if JWooten, CMDLGuy, BigDog, markk, Tip or some of the others can shed some light on this. My head is starting to hurt.

Joined: Feb 2004
Posts: 323
Member
Offline
Member
Joined: Feb 2004
Posts: 323
According to section 7-18 of the manual this setting only effects the mailboxs user's ability to dial "0" from their mailbox's main menu to access a three-way cal trabsfer out of the mail box and does't effect the ability to exterbal notification or transfer the caller to an external number from the box.

Kerry

Joined: Oct 2001
Posts: 6,160
Member
Offline
Member
Joined: Oct 2001
Posts: 6,160
I just set mine up to call through by allowing it in COS. When I get to the mailbox and hit zero it asks for the number to transfer to, I put it in, and keylink says it's doing a 3 way call, but it never establishes a connection. It seems to put me on hold but it doesn't seize a line and dial. There must be some other required parameter. Appears this setting doesn't allow toll fraud.
mark

Joined: Feb 2004
Posts: 323
Member
Offline
Member
Joined: Feb 2004
Posts: 323
Mark,

I m not sure but I think that three way call transfer needs Centrex services on the trunk to work. Look at Sequence to Transfer Three way call and it should give you an idea.

Kerry

Joined: Oct 2001
Posts: 6,160
Member
Offline
Member
Joined: Oct 2001
Posts: 6,160
kerry,
centrex or 3 way calling on the line, and I have 3 way calling on the lines. I don't care to use it, I just wanted to see the senario in the thread. If I have to get out the manual, somebody has to get billed. [Linked Image from sundance-communications.com]
mark

Page 1 of 2 1 2

Link Copied to Clipboard
Forum Statistics
Forums84
Topics94,284
Posts638,772
Members49,765
Most Online5,661
May 23rd, 2018
Popular Topics(Views)
211,459 Shoretel
188,319 CTX100 install
187,092 1a2 system
Newest Members
Nadisale, andreww, gohunt, Darrick, telecopippo
49,764 Registered Users
Top Posters(30 Days)
Toner 23
teleco 5
jc2it 4
dans 3
Who's Online Now
2 members (Carl Navarro, nortelvoip), 91 guests, and 351 robots.
Key: Admin, Global Mod, Mod
Contact Us | Sponsored by Atcom: One of the best VoIP Phone Canada Suppliers for your business telephone system!| Terms of Service

Sundance Communications is not affiliated with any of the above manufacturers. Sundance Phone System Forums - VOIP & Cloud Phone Help
©Copyright Sundance Communications 1998-2024
Powered by UBB.threads™ PHP Forum Software 7.7.5