asterisk users - Aug 2016 - Removing mailbox and password prompt for voicemail

I tried your extension definition as suggested:

exten => *98,1,Verbose(0,${CHANNEL(peername)} calling voicemail)
same => n,VoicemailMain(${CHANNEL(peername)}@VoiceMail,s)
same => n,Hangup

But there was no change in the prompts asked, ie. the voice first asked for
'mailbox', and then 'password' as before. The prompts are not
removed.

Please clarify what you mean by the following:

"If someone presses '*' while listening to your answer message then
they
are in your mailbox."

Do you mean while someone is listening to another user's 'unavailable
message' or 'busy message', if they press '*' at that time
they will enter
the other person's mailbox?

Nabeel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20160731/8a6d0f05/attachment.html>

On 07/30/2016 11:19 PM, Nabeel wrote:
> I tried your extension definition as suggested:
>
> exten => *98,1,Verbose(0,${CHANNEL(peername)} calling voicemail)
> same => n,VoicemailMain(${CHANNEL(peername)}@VoiceMail,s)
> same => n,Hangup
>
> But there was no change in the prompts asked, ie. the voice first asked
> for 'mailbox', and then 'password' as before. The prompts
are not removed.
>
> Please clarify what you mean by the following:
>
> "If someone presses '*' while listening to your answer message
then they
> are in your mailbox."
>
> Do you mean while someone is listening to another user's
'unavailable
> message' or 'busy message', if they press '*' at that
time they will
> enter the other person's mailbox?
>
> Nabeel
Depending on the version of Asterisk you are running, and assuming that 
your phones are SIP devices, you might want to try this (lots of debug 
at the top which could be removed):


exten => *98,1,NoOp(------- VOICEMAIL MENU -------)
same => n,NoOp(CALLERID(num): ${CALLERID(num)})
same => n,NoOp(ip : ${SIPPEER(${CALLERID(num)},ip)})
same => n,NoOp(mailbox : ${SIPPEER(${CALLERID(num)},mailbox)})
same => n,set(DATETIME=${STRFTIME(${EPOCH},,%C%y-%m%d-%H%M)})
same => n,NoOp(DATETIME : ${DATETIME})
same => n,Answer
same => n,Playback(silence/1)
;same => n,ExecIf($["${CALLERID(num)}" = 
"206"]?Set(VMBOX=102):Set(VMBOX=100))
same => n,Set(VMBOX=${SIPPEER(${CALLERID(num)},mailbox)})
same => n,VoicemailMain(${VMBOX},s)
same => n,Hangup

If you wish to override the default mailbox for a particular user, you 
can also uncomment the line above which in this example connects 
extension 206 to the voicemail box for extension 100.

;same => n,ExecIf($["${CALLERID(num)}" = 
"206"]?Set(VMBOX=102):Set(VMBOX=100))

On Sun, 31 Jul 2016 06:19:13 +0100
Nabeel <nabeelshikder at gmail.com> wrote:
> I tried your extension definition as suggested:
But did you understand every line and what it was doing?
> exten => *98,1,Verbose(0,${CHANNEL(peername)} calling voicemail)
> same => n,VoicemailMain(${CHANNEL(peername)}@VoiceMail,s)
> same => n,Hangup
> 
> But there was no change in the prompts asked, ie. the voice first
> asked for 'mailbox', and then 'password' as before. The
prompts are
> not removed.
Too much information missing.  Perhaps instead of asking how to
implement the solution that you have already decided on you should
instead tell us what problem you are trying to solve.  Are you really
trying to make your voicemail available to anyone who calls you or are
you limiting it to just the registered phone?  How are you accessing VM?
> Please clarify what you mean by the following:
> 
> "If someone presses '*' while listening to your answer message
then
> they are in your mailbox."
> 
> Do you mean while someone is listening to another user's
'unavailable
> message' or 'busy message', if they press '*' at that
time they will
> enter the other person's mailbox?
That's exactly what I mean.  That's why you need to password protect
it.  The above recipe allows you to bypass the password prompt but only
when called from the registered phone and only when "*98" is dialed
from that phone.

I suspect that you need to read the documentation a lot more.  VoIP/SIP
is complicated.  I certainly don't understand everything but I was able
to craft the above extension by reading up on extensions as well as
system variables.

-- 
D'Arcy J.M. Cain
System Administrator, Vex.Net
http://www.Vex.Net/ IM:darcy at Vex.Net
VoIP: sip:darcy at Vex.Net

>
> But did you understand every line and what it was doing?
>
They are quite self-explanatory, so of-course I understand them.

> Too much information missing.  Perhaps instead of asking how to
> implement the solution that you have already decided on you should
> instead tell us what problem you are trying to solve.  Are you really
> trying to make your voicemail available to anyone who calls you or are
> you limiting it to just the registered phone?  How are you accessing VM

I am using ODBC realtime storage with Asterisk. Currently, with no password
set, a user can dial the voicemail number to retrieve their own voicemail,
without needing to enter a password (without hearing the password prompt).
However, there is still a 'mailbox' prompt played, and if a different
mailbox number is entered after this prompt, then a password can be entered
(if set) which intrudes into the other person's mailbox. I want to remove
this 'mailbox' prompt so that users won't have this opportunity to
access
another person's mailbox.

That's exactly what I mean.  That's why you need to password
protect
> it.

I am yet to test this behaviour in Asterisk during the Unavailable/Busy
message. However, if this is the case, then this seems to be an illogical
security hole in Asterisk's design. Why does Asterisk allow accessing
another person's mailbox by pressing the '*' key, while listening to
*the
other person's* unavailable message?

Nabeel
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20160801/e037172e/attachment.html>