Retrieving voicemail without entering user ID (extension)
I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access. Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password. I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan. Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons? I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction. As always, thanks for any help, Joe P.
Look at the end of: http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail <http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail>Advisable? With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication. It was removed on purpose due to that reason as far as I remember. On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski < joseph.puchalski@personalcyberspace.com> wrote:
I’m trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access.
Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password.
I’ve poked around “mod voicemail” on the wiki and searched the mailing list and web, but haven’t found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan.
Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons?
I apologize ahead of time if the answer is somewhere in plain sight that I haven’t looked yet. If so, I’d much appreciate being pointed in the right direction.
As always, thanks for any help,
Joe P.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- -Rupa
From reading that wiki article it seems to me that the key to achieving the functionality you are looking for would simply be a matter of adding the desired extension to the end of the default action (where the $1 is):
<action application="voicemail" data="check $${voicemail_profile} $${domain} $1"/> If I am reading it correctly, this should bypass having to enter a mailbox ID, but still require your voicemail password. Off the top of my head, you could probably achieve this by replacing the $1 with a variable storing the extension which called 4000. I would have to look it up to see if there is a system variable for that or if you would have to assign a custom one. I am still relatively new to FreeSWITCH myself. -Adam From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Rupa Schomaker Sent: Wednesday, February 24, 2010 5:01 PM To: freeswitch-users Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) Look at the end of: http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail Advisable? With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication. It was removed on purpose due to that reason as far as I remember. On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski <joseph.puchalski@personalcyberspace.com> wrote: I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access. Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password. I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan. Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons? I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction. As always, thanks for any help, Joe P. _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- -Rupa
You are 100% correct. /b On Feb 24, 2010, at 7:10 PM, Adam Ford wrote:
From reading that wiki article it seems to me that the key to achieving the functionality you are looking for would simply be a matter of adding the desired extension to the end of the default action (where the $1 is):
<action application="voicemail" data="check $${voicemail_profile} $${domain} $1"/>
If I am reading it correctly, this should bypass having to enter a mailbox ID, but still require your voicemail password. Off the top of my head, you could probably achieve this by replacing the $1 with a variable storing the extension which called 4000. I would have to look it up to see if there is a system variable for that or if you would have to assign a custom one. I am still relatively new to FreeSWITCH myself.
-Adam
Adam, Thanks! I'll give this a try. I'm FreeSWITCH newbie myself, having a fun time figuring out everything in this amazingly rich (and challenging) environment :) Joe From: Adam Ford [mailto:lists@redbonez.net] Sent: Wednesday, February 24, 2010 8:10 PM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension)
From reading that wiki article it seems to me that the key to achieving the functionality you are looking for would simply be a matter of adding the desired extension to the end of the default action (where the $1 is):
<action application="voicemail" data="check $${voicemail_profile} $${domain} $1"/> If I am reading it correctly, this should bypass having to enter a mailbox ID, but still require your voicemail password. Off the top of my head, you could probably achieve this by replacing the $1 with a variable storing the extension which called 4000. I would have to look it up to see if there is a system variable for that or if you would have to assign a custom one. I am still relatively new to FreeSWITCH myself. -Adam From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Rupa Schomaker Sent: Wednesday, February 24, 2010 5:01 PM To: freeswitch-users Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) Look at the end of: http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail Advisable? With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication. It was removed on purpose due to that reason as far as I remember. On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski <joseph.puchalski@personalcyberspace.com<mailto:joseph.puchalski@personalcyberspace.com>> wrote: I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access. Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password. I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan. Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons? I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction. As always, thanks for any help, Joe P. _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- -Rupa
Joe, I used the extension below, but I think that Brian said it was too insecure. Being a total beginner, I removed the condition. <extension name="Local_Extension_Abe"> <condition field="destination_number" expression="^(101[0-9])$"> <action application="set" data="dialed_ext=$1"/> <action application="export" data="dialed_ext=$1"/> </condition> <condition field="destination_number" expression="^${caller_id_number}$"> <action application="set" data="voicemail_authorized=${sip_authorized}"/> <action application="answer"/> <action application="sleep" data="1000"/> <action application="voicemail" data="check default $${domain} ${dialed_ext}"/> <anti-action application="bind_meta_app" data="1 a a execute_extension::dx XML features"/> <anti-action application="bind_meta_app" data="2 a a record_session::$${base_dir}/recordings/${caller_id_number}.${strftime(%Y-%m -%d-%H-%M-%S)}.wav"/> <anti-action application="bind_meta_app" data="3 a a execute_extension::cf XML features"/> <anti-action application="set" data="transfer_ringback=${us-ring}"/> <anti-action application="set" data="call_timeout=15"/> <anti-action application="set" data="sip_exclude_contact=${network_addr}"/> <anti-action application="set" data="hangup_after_bridge=true"/> <!--<anti-action application="set" data="continue_on_fail=NORMAL_TEMPORARY_FAILURE,BUSY,USER_BUSY,NO_ANSWER,TIM EOUT,NO_ROUTE_DESTINATION"/> --> <anti-action application="set" data="continue_on_fail=true"/> <anti-action application="db" data="insert/call_return/${dialed_ext}/${caller_id_number}"/> <anti-action application="db" data="insert/last_dial_ext/${dialed_ext}/${uuid}"/> <anti-action application="bridge" data="user/${dialed_ext}@$${domain}"/> <anti-action application="answer"/> <anti-action application="sleep" data="1000"/> <anti-action application="voicemail" data="default $${domain} ${dialed_ext}"/> </condition> </extension> Lars From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Rupa Schomaker Sent: Wednesday, February 24, 2010 4:01 PM To: freeswitch-users Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) Look at the end of: http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail Advisable? With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication. It was removed on purpose due to that reason as far as I remember. On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski <joseph.puchalski@personalcyberspace.com> wrote: I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access. Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password. I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan. Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons? I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction. As always, thanks for any help, Joe P. _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- -Rupa
On 25 February 2010 14:08, Lars Zeb <larclap@yahoo.com> wrote:
I used the extension below, but I think that Brian said it was too insecure. Being a total beginner, I removed the condition.
Too insecure for what? I think it really depends on the installation, what the phone are for, where the phones are positioned, who has access, etc. I could imagine scenarios where being able to "walk up to anyone's phone and retrieve their VM w/out authentication" might be considered a feature. e.g. home office. At my home, under my asterisk setup, it always seems to be up to me to delete the messages, because others consider it too complicated to log in. Generally people are use to being able to walk up to an answering machine, push a button, and retrieve messages without any authentication. Then again, making this the default configuration would be a bad idea. People need to understand the consequences first. Oh, just a minor nitpick, or possibly an opportunity for me to learn <grin>. I see near the top that there is an export immediately after the set. Is the set really needed? I thought the export would override this? Why is export needed? -- Brian May <brian@microcomaustralia.com.au>
I think many of you are missing the fact that he said he still wanted to have to enter the mailbox password. He just didn't want people to have to enter the mailbox ID AND the mailbox password. Still plenty secure as long as you don't have a default voicemail password for all extensions. -Adam -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian May Sent: Thursday, February 25, 2010 2:07 AM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) On 25 February 2010 14:08, Lars Zeb <larclap@yahoo.com> wrote:
I used the extension below, but I think that Brian said it was too insecure. Being a total beginner, I removed the condition.
Too insecure for what? I think it really depends on the installation, what the phone are for, where the phones are positioned, who has access, etc. I could imagine scenarios where being able to "walk up to anyone's phone and retrieve their VM w/out authentication" might be considered a feature. e.g. home office. At my home, under my asterisk setup, it always seems to be up to me to delete the messages, because others consider it too complicated to log in. Generally people are use to being able to walk up to an answering machine, push a button, and retrieve messages without any authentication. Then again, making this the default configuration would be a bad idea. People need to understand the consequences first. Oh, just a minor nitpick, or possibly an opportunity for me to learn <grin>. I see near the top that there is an export immediately after the set. Is the set really needed? I thought the export would override this? Why is export needed? -- Brian May <brian@microcomaustralia.com.au> _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Lars, Thanks! Joe From: Lars Zeb [mailto:larclap@yahoo.com] Sent: Wednesday, February 24, 2010 10:09 PM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) Joe, I used the extension below, but I think that Brian said it was too insecure. Being a total beginner, I removed the condition. <extension name="Local_Extension_Abe"> <condition field="destination_number" expression="^(101[0-9])$"> <action application="set" data="dialed_ext=$1"/> <action application="export" data="dialed_ext=$1"/> </condition> <condition field="destination_number" expression="^${caller_id_number}$"> <action application="set" data="voicemail_authorized=${sip_authorized}"/> <action application="answer"/> <action application="sleep" data="1000"/> <action application="voicemail" data="check default $${domain} ${dialed_ext}"/> <anti-action application="bind_meta_app" data="1 a a execute_extension::dx XML features"/> <anti-action application="bind_meta_app" data="2 a a record_session::$${base_dir}/recordings/${caller_id_number}.${strftime(%Y-%m-%d-%H-%M-%S)}.wav"/> <anti-action application="bind_meta_app" data="3 a a execute_extension::cf XML features"/> <anti-action application="set" data="transfer_ringback=${us-ring}"/> <anti-action application="set" data="call_timeout=15"/> <anti-action application="set" data="sip_exclude_contact=${network_addr}"/> <anti-action application="set" data="hangup_after_bridge=true"/> <!--<anti-action application="set" data="continue_on_fail=NORMAL_TEMPORARY_FAILURE,BUSY,USER_BUSY,NO_ANSWER,TIMEOUT,NO_ROUTE_DESTINATION"/> --> <anti-action application="set" data="continue_on_fail=true"/> <anti-action application="db" data="insert/call_return/${dialed_ext}/${caller_id_number}"/> <anti-action application="db" data="insert/last_dial_ext/${dialed_ext}/${uuid}"/> <anti-action application="bridge" data="user/${dialed_ext}@$${domain}"/> <anti-action application="answer"/> <anti-action application="sleep" data="1000"/> <anti-action application="voicemail" data="default $${domain} ${dialed_ext}"/> </condition> </extension> Lars From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Rupa Schomaker Sent: Wednesday, February 24, 2010 4:01 PM To: freeswitch-users Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) Look at the end of: http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail Advisable? With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication. It was removed on purpose due to that reason as far as I remember. On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski <joseph.puchalski@personalcyberspace.com<mailto:joseph.puchalski@personalcyberspace.com>> wrote: I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access. Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password. I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan. Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons? I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction. As always, thanks for any help, Joe P. _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- -Rupa
Thanks for the reply. I'm not trying to remove the requirement for a password, just the need to enter an extension from a user's "home" phone. The current methods I'm familiar with require that the user enter both a user ID and a password. I'm hoping there's a way that the user ID can be defaulted to be the calling extension. This way I can set up a "voicemail" key on a user's desktop phone and allow them to access vmail by entering just a password. Thanks again, Joe From: Rupa Schomaker [mailto:rupa@rupa.com] Sent: Wednesday, February 24, 2010 7:01 PM To: freeswitch-users Subject: Re: [Freeswitch-users] Retrieving voicemail without entering user ID (extension) Look at the end of: http://wiki.freeswitch.org/wiki/Mod_voicemail#Check_Voice_Mail Advisable? With it enabled, I can walk up to anyone's phone and retrieve their VM w/out authentication. It was removed on purpose due to that reason as far as I remember. On Wed, Feb 24, 2010 at 5:45 PM, Joseph Puchalski <joseph.puchalski@personalcyberspace.com<mailto:joseph.puchalski@personalcyberspace.com>> wrote: I'm trying to modify my dialplan so that I can press a single button on my phone, be connected to voicemail, and enter only a password to gain access. Currently I use a programmable key to dial 4000. I am prompted for my ID, and then password. I've poked around "mod voicemail" on the wiki and searched the mailing list and web, but haven't found enough info. I have discovered that this behavior seems to have been available in previous versions of the default dialplan. Is it still possible? Is it advisable? Was this feature/behavior removed for security reasons? I apologize ahead of time if the answer is somewhere in plain sight that I haven't looked yet. If so, I'd much appreciate being pointed in the right direction. As always, thanks for any help, Joe P. _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- -Rupa
participants (6)
-
Adam Ford
-
Brian May
-
Brian West
-
Joseph Puchalski
-
Lars Zeb
-
Rupa Schomaker