web statisticsweb stats Business Phone Systems Tech Talk Forum - VOIP & Cloud Phone Help

Business Phone Systems

Previous Thread
Next Thread
Print Thread
Rate Thread
Page 1 of 2 1 2
#122130 10/14/04 10:59 AM
Joined: May 2004
Posts: 335
Member
OP Offline
Member
Joined: May 2004
Posts: 335
This customer is a defense contractor with the Gov't. Their system keeps calling every terrorist nation in the Middle East you can think of. The FBI's even involed with this one.

Anyhoo....

I've gone over this system and (with the customer by side) looked at every Mbox in the system and deleted any old ones, or ones that weren't current empolyees.

We changed passwords on everything.

We disco'd the Rad.

It's still making calls.

The only thing I found relating to this was one Mbox had msg notification turned on to an internationl number, of course we deleted that box (after the FBI said it ok to do so).

My question is this: Is there any VM admin parameters available by logging into the actual mbox 102 (F981, not F983).

I didn't change that password thinking that you'd have to be on site to access F983, but now I'm wondering if someone can log into it as a user and hack in from there.

Help, I really don't want to default the whole system!


Punch down all your damn pairs!..........(please).
Nortel Phone System Service
VoIP Demo

Nortel Phone System Service in Canada


Do you need a Nortel Phone System technician or specific Nortel parts?
Atcom to the rescue! Our telephone techs have qualified experience servicing and troubleshooting Nortel CICS, MICS, & BCM telephone systems.
Service in Canada from sea to sea.

#122131 10/14/04 12:10 PM
Joined: Jan 2002
Posts: 2,328
Moderator-Comdial
*****
Offline
Moderator-Comdial
*****
Joined: Jan 2002
Posts: 2,328
Replace the hard drive and install the software! Better yet install a Call Pilot!If law enforcement is involved, contact Nortel directly. Help from them will probably be immediate. I'm surprised the unit hasn't been seized.

#122132 10/18/04 01:00 PM
Joined: May 2004
Posts: 335
Member
OP Offline
Member
Joined: May 2004
Posts: 335
Actually, the customer really had to rattle some cages to even get a response from the FBI. They ended up going through an employee who had a relative in the Bureau before they even got a call back and even then, they had to push the issue before an agent come out.....our tax dollars hard at work...


Punch down all your damn pairs!..........(please).
#122133 10/19/04 11:16 AM
Joined: Oct 2004
Posts: 2
Member
Offline
Member
Joined: Oct 2004
Posts: 2
Try restricting the voice mail ports to dial only local Phone #s. Dicsourage users from using easy passwords. If you have Norstar Voice Mail Manager I recommend you run a numeric mailbox report to see if anyone has any more international numbers in their outdial. Also, you may want to disable external initialization if it is on.

I have had this happen to a couple of my customers, this seems to help.

#122134 10/21/04 10:20 AM
Joined: May 2004
Posts: 335
Member
OP Offline
Member
Joined: May 2004
Posts: 335
Now that makes sense. I don't know why I didn't think of that before. I can disable external dial out on mboxes in 983 and I suppose I can apply a dialing filter on the VM ports themselves.

Still does anyone know if there are any admin parameters available by logging into mbox 102? I have only logged into it with F983.


Punch down all your damn pairs!..........(please).
#122135 10/21/04 01:04 PM
Joined: Oct 2004
Posts: 6
Member
Offline
Member
Joined: Oct 2004
Posts: 6
I think Gravelhead gave you th answer. It should work.

#122136 11/08/04 08:57 AM
Joined: Nov 2004
Posts: 1
Member
Offline
Member
Joined: Nov 2004
Posts: 1
AAAAARRRRGHHHHH!!!!!

This happened to me this weekend!!

I restricted ports to local calling only, changed everyones passwords.

This morning, VP gets a call saying that ATT reported now these slimeballs are using the local pics for access (1010-etc). Geez.

How many doors gotta be closed?? I am only the network engineer here and not a phone guru, doing my best at it. Any pointers??

#122137 11/08/04 10:59 AM
Joined: Jan 2002
Posts: 2,328
Moderator-Comdial
*****
Offline
Moderator-Comdial
*****
Joined: Jan 2002
Posts: 2,328
You never said what switch this NAM sits behind. You can go into your dialing filters and build restrictions and you can also initiate account codes. It sounds as if you've got a phreaker on staff! Install an SMDR unit to track the calls.

[This message has been edited by jwooten (edited November 08, 2004).]

#122138 11/08/04 11:55 AM
Joined: May 2004
Posts: 335
Member
OP Offline
Member
Joined: May 2004
Posts: 335
I restricted all vm ports from dialing out period.

1.,2.,3.,4.,5.,6.,7.,8.,9., 0. in a dialing filter.

It seems to have worked because now they've got a couple of messages in a couple of mboxes that say, "The sysem was unable to deliver the message to the number you specified" Which of course is a message notification failure report to the user.


They also set up outbound transfer with only "011" in a box as well as an 800 number to some communications company that gives an automated prompt asking for out of state number you want to connect to.

The thing I don't get is that in VM admin, all mboxes are set to outdialing = No. So even if the mboxes are set up to do it, they shouldn't be able to.

But as soon as they lifted the international restrictions from telco, they were hit again the very same day.


why is that?


------------------
Punch down all your damn pairs!..........please.


Punch down all your damn pairs!..........(please).
#122139 11/08/04 11:58 AM
Joined: May 2004
Posts: 335
Member
OP Offline
Member
Joined: May 2004
Posts: 335
BTW, this one is an old copper NAM on an early MICS. Probably a 1. something.
The menu on the KSU looks like the old DR5 824 style menus.


Punch down all your damn pairs!..........(please).
Page 1 of 2 1 2

Moderated by  MooreTel 

Link Copied to Clipboard
Forum Statistics
Forums84
Topics94,262
Posts638,694
Members49,757
Most Online5,661
May 23rd, 2018
Popular Topics(Views)
211,098 Shoretel
187,703 CTX100 install
186,794 1a2 system
Newest Members
BPopilek, Rich F, LewisR, TDKs79, Buttinset
49,757 Registered Users
Top Posters(30 Days)
dexman 18
Toner 14
TDKs79 8
pvj 4
Who's Online Now
2 members (teleco, BobRobert), 108 guests, and 249 robots.
Key: Admin, Global Mod, Mod
Contact Us | Sponsored by Atcom: One of the best VoIP Phone Canada Suppliers for your business telephone system!| Terms of Service

Sundance Communications is not affiliated with any of the above manufacturers. Sundance Phone System Forums - VOIP & Cloud Phone Help
©Copyright Sundance Communications 1998-2024
Powered by UBB.threads™ PHP Forum Software 7.7.5