[Freeswitch-users] Retrieving voicemail without entering user ID (extension)

[Lars Zeb]

Joe,

 

I used the extension below, but I think that Brian said it was too insecure.
Being a total beginner, I removed the condition. 

 

    <extension name="Local_Extension_Abe">

      <condition field="destination_number" expression="^(101[0-9])$">

        <action application="set" data="dialed_ext=$1"/>

        <action application="export" data="dialed_ext=$1"/>

      </condition>

      <condition field="destination_number"
expression="^${caller_id_number}$">

        <action application="set"
data="voicemail_authorized=${sip_authorized}"/>

        <action application="answer"/>

        <action application="sleep" data="1000"/>

        <action application="voicemail" data="check default $${domain}
${dialed_ext}"/>

        <anti-action application="bind_meta_app" data="1 a a
execute_extension::dx XML features"/>

        <anti-action application="bind_meta_app" data="2 a a
record_session::$${base_dir}/recordings/${caller_id_number}.${strftime(%Y-%m
-%d-%H-%M-%S)}.wav"/>

        <anti-action application="bind_meta_app" data="3 a a
execute_extension::cf XML features"/>

        <anti-action application="set" data="transfer_ringback=${us-ring}"/>

        <anti-action application="set" data="call_timeout=15"/>

        <anti-action application="set"
data="sip_exclude_contact=${network_addr}"/>

        <anti-action application="set" data="hangup_after_bridge=true"/>

        <!--<anti-action application="set"
data="continue_on_fail=NORMAL_TEMPORARY_FAILURE,BUSY,USER_BUSY,NO_ANSWER,TIM
EOUT,NO_ROUTE_DESTINATION"/> -->

        <anti-action application="set" data="continue_on_fail=true"/>

        <anti-action application="db"
data="insert/call_return/${dialed_ext}/${caller_id_number}"/>

        <anti-action application="db"
data="insert/last_dial_ext/${dialed_ext}/${uuid}"/>

        <anti-action application="bridge"
data="user/${dialed_ext}@$${domain}"/>

        <anti-action application="answer"/>

        <anti-action application="sleep" data="1000"/>

        <anti-action application="voicemail" data="default $${domain}
${dialed_ext}"/>

      </condition>

    </extension>

 

Lars

From: freeswitch-users-bounces at lists.freeswitch.org
[mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Rupa
Schomaker
Sent: Wednesday, February 24, 2010 4:01 PM
To: freeswitch-users
Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user
ID (extension)

 

Look at the end of:

 

http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail

 

Advisable?  With it enabled, I can walk up to anyone's phone and retrieve
their VM w/out authentication.  It was removed on purpose due to that reason
as far as I remember.

On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski
<joseph.puchalski at personalcyberspace.com> wrote:

I'm trying to modify my dialplan so that I can press a single button on my
phone, be connected to voicemail, and enter only a password to gain access. 

 

Currently I use a programmable key to dial 4000. I am prompted for my ID,
and then password.

 

I've poked around "mod voicemail" on the wiki and searched the mailing list
and web, but haven't found enough info. I have discovered that this behavior
seems to have been available in previous versions of the default dialplan.

 

Is it still possible? Is it advisable? Was this feature/behavior removed for
security reasons?

 

I apologize ahead of time if the answer is somewhere in plain sight that I
haven't looked yet. If so, I'd much appreciate being pointed in the right
direction.

 

As always, thanks for any help,

 

Joe P.


_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




-- 
-Rupa

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100224/a70f78ec/attachment-0002.html