sundance-communications.com/forum Forums TDM Business Telephone Systems Nortel Telephones & Systems nam outbound transfer

had a problem today w/a hacker calling into the nam and dialing out thru a mailbox which they figured out the password(1234 probably) and set up outbound transfer. The thing that throws me is the notification # was 1167. At that point a hookflash seemed to be performed and return dial tone, and out they went. So was did 1167 do for them???

Hi Jim!

Nothing that I can think of. But, they probably aren't hacking the notification. It is usually the Outbound Transfer on the mailbox that is of real value for toll fraud.

I had the same exact thing happen here. 37 calls total. our LD provider alerted us to the calls. Our SMDR showed just enough to put a stop to it.

They found the password for one of our VMB's, changed the outbound transfer to 1167, which gave a dial tone. I was able to do it myself on that VMB.

However, in a hurry, I shut down outbound transfer and changed the users password. Now that they can't get in the system, I'm trying to reproduce it on my own voicemail box. I dont understand how they got a dialtone with 1167. I'm unable to do it myself.

Someone please shed some light on this, so I can understand it. Thanks

I set the same senerio up myself at a different site and it worked the same way. What the hell is 1167??? Someones gotta know or if they don't someone should be informed.

I'm 61 and my brain is often foggy, but I do seem to remember 1167 being a code to dial tone on a pulse line.

If a line was already in tone, 1167 would probably just reinforce the tone dialing and the call would go out.

I assume this is copper lines and not T-1/PRI.

I would guess that if you dialed 1 1 6 7 1 8 0 0 5 5 5 1 2 1 2 you would get 800 information.

Setting your passcodes to 6 digits and requiring monthly changes would prevent this.

Also, setting the outbound dial from the always used 9 to some number as 9182 would certainly keep their little asses guessing for a while.

Also, you could put a dial tone simulator on a copper line with dial 9 and make the real dial tone path 9182 (some other number this is an example) the boys would go crazy trying to go out on 9 attached to the simulator.

It is such evil fun screwing over the crooks.

1167 is the same as dialing *67 (Outgoing call display blocking). CO's translate 11 for * and 12 for #. This goes back to the days of pulse dialing.

Hey guys w’about caller id blocking feature (*67 or 1167)? Must to be restricted!!!

Opss,sorry Marv was faster.

Heres the thing. When i figured out what extension was hacked, i called it, pressed 7 and got a dial tone. the smdr said digits dialed were 1167.

so after i secured our system, i got into my voicemail, set my outbound transfer to 1167 and when i dialed my own number and pressed 7 i did not get a dial tone. I dont understand that. the smdr log looked the same as it had for the hacked vmb but it didnt work the same.

thats what im trying to understand and learn.