Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension)

25 Feb 2010

      Joe,

I used the extension below, but I think that Brian said it was too insecure.
Being a total beginner, I removed the condition. 

    <extension name="Local_Extension_Abe">

      <condition field="destination_number" expression="^(101[0-9])$">

        <action application="set" data="dialed_ext=$1"/>

        <action application="export" data="dialed_ext=$1"/>

      </condition>

      <condition field="destination_number"
expression="^${caller_id_number}$">

        <action application="set"
data="voicemail_authorized=${sip_authorized}"/>

        <action application="answer"/>

        <action application="sleep" data="1000"/>

        <action application="voicemail" data="check default $${domain}
${dialed_ext}"/>

        <anti-action application="bind_meta_app" data="1 a a
execute_extension::dx XML features"/>

        <anti-action application="bind_meta_app" data="2 a a
record_session::$${base_dir}/recordings/${caller_id_number}.${strftime(%Y-%m
-%d-%H-%M-%S)}.wav"/>

        <anti-action application="bind_meta_app" data="3 a a
execute_extension::cf XML features"/>

        <anti-action application="set" data="transfer_ringback=${us-ring}"/>

        <anti-action application="set" data="call_timeout=15"/>

        <anti-action application="set"
data="sip_exclude_contact=${network_addr}"/>

        <anti-action application="set" data="hangup_after_bridge=true"/>

        <!--<anti-action application="set"
data="continue_on_fail=NORMAL_TEMPORARY_FAILURE,BUSY,USER_BUSY,NO_ANSWER,TIM
EOUT,NO_ROUTE_DESTINATION"/> -->

        <anti-action application="set" data="continue_on_fail=true"/>

        <anti-action application="db"
data="insert/call_return/${dialed_ext}/${caller_id_number}"/>

        <anti-action application="db"
data="insert/last_dial_ext/${dialed_ext}/${uuid}"/>

        <anti-action application="bridge"
data="user/${dialed_ext}@$${domain}"/>

        <anti-action application="answer"/>

        <anti-action application="sleep" data="1000"/>

        <anti-action application="voicemail" data="default $${domain}
${dialed_ext}"/>

      </condition>

    </extension>

Lars

From: freeswitch-users-bounces@lists.freeswitch.org
[mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Rupa
Schomaker
Sent: Wednesday, February 24, 2010 4:01 PM
To: freeswitch-users
Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user
ID (extension)

Look at the end of:

http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail

Advisable?  With it enabled, I can walk up to anyone's phone and retrieve
their VM w/out authentication.  It was removed on purpose due to that reason
as far as I remember.

On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski
<joseph.puchalski@personalcyberspace.com> wrote:

I'm trying to modify my dialplan so that I can press a single button on my
phone, be connected to voicemail, and enter only a password to gain access. 

Currently I use a programmable key to dial 4000. I am prompted for my ID,
and then password.

I've poked around "mod voicemail" on the wiki and searched the mailing list
and web, but haven't found enough info. I have discovered that this behavior
seems to have been available in previous versions of the default dialplan.

Is it still possible? Is it advisable? Was this feature/behavior removed for
security reasons?

I apologize ahead of time if the answer is somewhere in plain sight that I
haven't looked yet. If so, I'd much appreciate being pointed in the right
direction.

As always, thanks for any help,

Joe P.

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

-- 
-Rupa

Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension)

Lars Zeb