asterisk users - Aug 2016 - Removing mailbox and password prompt for voicemail

On 30 July 2016 at 19:32, D'Arcy J.M. Cain <darcy at vex.net>
wrote:
>
>
> Not playing the prompt changes nothing.  If someone presses '*'
while
> listening to your answer message then they are in your mailbox.  You
> better have a password that they need to enter to continue.


I have now tested the 'Unavailable' message by pressing "*"
while listening
to the recorded message. I can confirm that this does NOT directly enter to
the called number's mailbox. It actually enter's the registered
device's/caller's own mailbox. Therefore, this does not necessitate
setting
a password.

The problem is that the 'mailbox' prompt allows a way for accessing any
other mailbox, which is not necessary in my case. If anyone knows a way to
remove this 'mailbox' prompt, please let me know.

Nabeel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20160804/244a39e4/attachment.html>

On 2016-08-04 09:12, Nabeel wrote:
> The problem is that the 'mailbox' prompt allows a way for accessing
> any other mailbox, which is not necessary in my case. If anyone knows
> a way to remove this 'mailbox' prompt, please let me know.
> 
Not having followed the thread from the beginning I must admit, not sure 
if the 's' flag has been suggested to you?  What I have in my dial plan 
is

exten => 100,n,VoicemailMain(s${CALLERID(num)})

So callers can dial 100 from their phones and get immediately into their 
mailboxes without any sort of authentication.

This does have security concerns as anyone can walk up to anybody else's 
phone and start dialling to listen to someone else's messages.  In my 
installation this is not a problem, but could be a problem elsewhere.

Apologies if the thread was about something entirely different and this 
was not the problem.

regards
Adam

On Thu, 4 Aug 2016 09:12:53 +0100
Nabeel <nabeelshikder at gmail.com> wrote:
> On 30 July 2016 at 19:32, D'Arcy J.M. Cain <darcy at vex.net>
wrote:
> > Not playing the prompt changes nothing.  If someone presses
'*'
> > while listening to your answer message then they are in your
> > mailbox.  You better have a password that they need to enter to
> > continue.
>
> I have now tested the 'Unavailable' message by pressing
"*" while
> listening to the recorded message. I can confirm that this does NOT
> directly enter to the called number's mailbox. It actually enter's
> the registered device's/caller's own mailbox. Therefore, this does
> not necessitate setting a password.
Let's get this straight.  You call yourself from any phone in the world
and press '*' while listening to the message, you wind up in your own
mailbox and you believe that means that you don't need a password?  Do
you think that the phone system somehow knows that it is you calling
and not one of the other 7.4 billion people on the planet.  The
password is how it knows.
> The problem is that the 'mailbox' prompt allows a way for accessing
> any other mailbox, which is not necessary in my case. If anyone knows
> a way to remove this 'mailbox' prompt, please let me know.
This seems to conflict with the first paragraph.  Are you being asked
for the mailbox number or the password?  In a properly set up system,
entering '*' during the message should put you into the callee's
mailbox and ask for a password.  Calling '*98' from your own phone, if
the extension I originally showed you exists, should put you directly
into your own mailbox without asking for a password.

I think that it is well past the time to tell us what your setup is and
exactly what you are trying to accomplish.  I think that you may be
making the common error of telling us your solution (remove mailbox
prompt) rather than your actual problem.

-- 
D'Arcy J.M. Cain
System Administrator, Vex.Net
http://www.Vex.Net/ IM:darcy at Vex.Net
VoIP: sip:darcy at Vex.Net

On 4 August 2016 at 13:18, D'Arcy J.M. Cain <darcy at vex.net> wrote:
>
> Let's get this straight.  You call yourself from any phone in the world
> and press '*' while listening to the message, you wind up in your
own
> mailbox and you believe that means that you don't need a password?  Do
> you think that the phone system somehow knows that it is you calling
> and not one of the other 7.4 billion people on the planet.  The
> password is how it knows.
>
You seem to misunderstand even after I have explained.  I don't need a
password when calling my mailbox from my own registered phone (not calling
from any other phone). I don't need to call my mailbox from other phones on
the planet, so I don't need a password.  Consider the voicemail you get
from your mobile network on your mobile phone. You don't access it from any
phone in the world; you only access it from the mobile phone which has your
SIM, and you probably don't enter a password for it.

> This seems to conflict with the first paragraph.  Are you being asked
> for the mailbox number or the password?  In a properly set up system,
> entering '*' during the message should put you into the
callee's
> mailbox and ask for a password.  Calling '*98' from your own phone,
if
> the extension I originally showed you exists, should put you directly
> into your own mailbox without asking for a password.

The password is only asked if a password has been set. A password is also
asked if any number is entered after the 'mailbox' prompt.

Nabeel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20160804/78b98f50/attachment.html>

On Thursday 04 Aug 2016, Nabeel wrote:
> On 30 July 2016 at 19:32, D'Arcy J.M. Cain <darcy at vex.net>
wrote:
> > Not playing the prompt changes nothing.  If someone presses
'*' while
> > listening to your answer message then they are in your mailbox.  You
> > better have a password that they need to enter to continue.
> 
> I have now tested the 'Unavailable' message by pressing
"*" while listening
> to the recorded message. I can confirm that this does NOT directly enter to
> the called number's mailbox. It actually enter's the registered
> device's/caller's own mailbox. Therefore, this does not necessitate
setting
> a password.
> 
> The problem is that the 'mailbox' prompt allows a way for accessing
any
> other mailbox, which is not necessary in my case. If anyone knows a way to
> remove this 'mailbox' prompt, please let me know.
> 
> Nabeel
To get rid of the "Mailbox?" prompt, you need to supply a mailbox as a
parameter to the VoicemailMain() command:

exten => xxxx,y,VoicemailMail(${mbox})

This takes you straight to the mailbox specified by ${mbox} .  If mailboxes are 
simply the same as extension numbers, then you can just use ${CALLERID(num)} 
here.  Otherwise, you may need a script to look them up in a database.

If you also add the "s" option, like this:

exten => xxxx,y,,VoicemailMail(${mbox},s)

Then this will also get rid of the "Password?" prompt  (and therefore
presume
you are already authenticated).  Therefore, this should *only* be used in one 
of the following situations:

(1)  In a small, intimate business environment, where there is full mutual 
trust between all personnel and nobody has any secrets from anybody else.

(2)  Where sufficient precautions have been taken to ensure that phones are 
physically secure against unwanted access.

The latter is the approach usually taken by telcos with their basic voicemail 
configuration; your messages can only be retrieved from your own phone, which 
normally is either behind a locked door  (if it is a land line)  or about your 
person  (if it is a mobile).

For instance, you might have something like this in your Dialplan.  
"get_mailbox.agi" is an AGI script  (not included)  for looking up the
mailbox
associated with a caller's number and populating a channel variable
"mbox", or
leaving it empty in the event of an error.  "ajs-vm_not_avail.wav" is
a sound
file  (also not included)  announcing that voicemail is not available.

exten => 1571,1,AGI(get_mailbox.agi,${CALLERID(num)})
exten => 1571,n,GotoIf($[${mbox}]?mbox_ok:mbox_err)
exten => 1571,n(mbox_ok),VoicemailMain(${mbox}, s)
exten => 1571,n,Hangup()
exten => 1571,n(mbox_ng),Playback(ajs-vm_not_avail)
exten => 1571,n,Hangup()

-- 
AJS

Note:  Originating address only accepts e-mail from list!  If replying off-
list, change address to asterisk1list at earthshod dot co dot uk .

On Thu, 4 Aug 2016 14:03:25 +0100
A J Stiles <asterisk_list at earthshod.co.uk>
wrote:
> To get rid of the "Mailbox?" prompt, you need to supply a mailbox
as
> a parameter to the VoicemailMain() command:
That's why I suggested this extension at the start of this thread.

exten => *98,1,Verbose(0,${CHANNEL(peername)} calling voicemail)
    same => n,VoicemailMain(${CHANNEL(peername)}@VoiceMail,s)
    same => n,Hangup

-- 
D'Arcy J.M. Cain
System Administrator, Vex.Net
http://www.Vex.Net/ IM:darcy at Vex.Net
VoIP: sip:darcy at Vex.Net