[Freeswitch-users] Retrieving voicemail without entering user ID (extension)

Joseph Puchalski joseph.puchalski at personalcyberspace.com
Thu Feb 25 15:31:18 PST 2010


Lars,

Thanks!

Joe

From: Lars Zeb [mailto:larclap at yahoo.com]
Sent: Wednesday, February 24, 2010 10:09 PM
To: freeswitch-users at lists.freeswitch.org
Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension)

Joe,

I used the extension below, but I think that Brian said it was too insecure. Being a total beginner, I removed the condition.

    <extension name="Local_Extension_Abe">
      <condition field="destination_number" expression="^(101[0-9])$">
        <action application="set" data="dialed_ext=$1"/>
        <action application="export" data="dialed_ext=$1"/>
      </condition>
      <condition field="destination_number" expression="^${caller_id_number}$">
        <action application="set" data="voicemail_authorized=${sip_authorized}"/>
        <action application="answer"/>
        <action application="sleep" data="1000"/>
        <action application="voicemail" data="check default $${domain} ${dialed_ext}"/>
        <anti-action application="bind_meta_app" data="1 a a execute_extension::dx XML features"/>
        <anti-action application="bind_meta_app" data="2 a a record_session::$${base_dir}/recordings/${caller_id_number}.${strftime(%Y-%m-%d-%H-%M-%S)}.wav"/>
        <anti-action application="bind_meta_app" data="3 a a execute_extension::cf XML features"/>
        <anti-action application="set" data="transfer_ringback=${us-ring}"/>
        <anti-action application="set" data="call_timeout=15"/>
        <anti-action application="set" data="sip_exclude_contact=${network_addr}"/>
        <anti-action application="set" data="hangup_after_bridge=true"/>
        <!--<anti-action application="set" data="continue_on_fail=NORMAL_TEMPORARY_FAILURE,BUSY,USER_BUSY,NO_ANSWER,TIMEOUT,NO_ROUTE_DESTINATION"/> -->
        <anti-action application="set" data="continue_on_fail=true"/>
        <anti-action application="db" data="insert/call_return/${dialed_ext}/${caller_id_number}"/>
        <anti-action application="db" data="insert/last_dial_ext/${dialed_ext}/${uuid}"/>
        <anti-action application="bridge" data="user/${dialed_ext}@$${domain}"/>
        <anti-action application="answer"/>
        <anti-action application="sleep" data="1000"/>
        <anti-action application="voicemail" data="default $${domain} ${dialed_ext}"/>
      </condition>
    </extension>

Lars
From: freeswitch-users-bounces at lists.freeswitch.org [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Rupa Schomaker
Sent: Wednesday, February 24, 2010 4:01 PM
To: freeswitch-users
Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension)

Look at the end of:

http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail

Advisable?  With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication.  It was removed on purpose due to that reason as far as I remember.
On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski <joseph.puchalski at personalcyberspace.com<mailto:joseph.puchalski at personalcyberspace.com>> wrote:
I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access.

Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password.

I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan.

Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons?

I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction.

As always, thanks for any help,

Joe P.

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org<mailto:FreeSWITCH-users at lists.freeswitch.org>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
-Rupa
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100225/2bfa1243/attachment-0002.html 


More information about the FreeSWITCH-users mailing list