Hacker makes international calls through my FreePBX IVR

[dicko]

Then I await your complete fix, it has so far WFM, but what do I know

Thanks though to You and Rob for paying attention here.

[xrobau (Rob Thomas)]

@dicko

No. I can’t think of a reason why a caller should be allowed to unilaterally transfer a call. I don’t.

A long time ago it cost me $13000 over a weekend via a badly configured voicemail system. Once bitten . . .

It would have been nice if you had mentioned this earlier, you know. We try to have sane defaults. 8-( Is there anything else you haven’t mentioned that we should know about?

@tm1000 has figured out a way to mark a call as coming in from a route and explicitly blocks the ‘T’ right before every Dial command, so there’s no way to allow it (he’s also adding an advanced setting so you can turn that off, if you really want).

FREEPBX-12058 prevent potential unexpected use of transfer functionality

http://issues.freepbx.org/browse/FREEPBX-12058

Core version 13.0.72

[dicko]

Sorry I don’t have a Tardis I posted that before you guys got involved though, I provided a diagnosis and a pragmatic fix in my first post.

Again thanks for realizing that it is indeed a problem.

[xrobau (Rob Thomas)]

@dicko

Sorry I don’t have a Tardis I posted that before you guys got involved though, I provided a diagnosis and a fix in my first post.

Yeah, but you said you were aware of this problem ‘A long time ago’

@dicko

A long time ago it cost me $13000

Are there any other things that happened a long time ago that you’re aware of, that we haven’t fixed?

[tm1000 (Andrew Nagy)]

I’ll issue a fix for 12 in a couple of days after this has been vetted for our neighbors who don’t want to use FreePBX 13.

[dicko]

Many . but seriously, most of you guys starting at the very top, don’t particularly like me

Edit:

Yes I have previously posted this problem before, but way before Sangoma became the arbitrator of all bugs, sorry I can’t remember when or where but it was definitely a while ago.

[tm1000 (Andrew Nagy)]

@dicko

Many . but seriously, most of you guys starting at the very top, don’t particularly like me

Wether we do or not (we do like you actually) is besides the point. You are telling us that you don’t report bugs because you feel as though you aren’t liked?

[xrobau (Rob Thomas)]

@dicko

Many . but seriously, most of you guys starting at the very top, don’t particularly like me

If you report bugs, and provide feedback, we love you.

[dicko]

Not so much, a couple of bugs I have posted have been ignored or denigrated, that doesn’t work for me, go look . . .

[xrobau (Rob Thomas)]

@dicko

Not so much, a couple of bugs I have posted have been ignored or denigrated, that doesn’t work for me

That’s not cool. I’m sorry you feel that way. If you could msg me some of the tickets, I can investigate them further.

Edit: Or post them here, we have no secrets 8)

[tm1000 (Andrew Nagy)]

@xrobau

That’s not cool. I’m sorry you feel that way. If you could msg me some of the tickets, I can investigate them further.

Edit: Or post them here, we have no secrets 8)

http://issues.freepbx.org/browse/FREEPBX-6025?jql=reporter%20%3D%20dicko

[dicko]

http://issues.freepbx.org/browse/FREEPBX-9170

How does that work for non commercial FreePBI where sysadmin is denied?

[dicko]

But that is not the point. I almost like what you guys do but pointing everyone to post a bug because that’s the only way, is perhaps spurious you got to take this thread, and hopefully fix it in short order, right?

[xrobau (Rob Thomas)]

@dicko

How does that work for non commercial FreePBI where sysadmin is denied

You’d edit httpd.conf to point to /var/www/html/ucp as DocumentRoot.

Or you could use index_custom.php to redirect it?

There’s plenty of ways in a non-distro machine.

[dicko]

True, and I thanked you specifically for that, BUT, it is undocumented as far as I know.

[tm1000 (Andrew Nagy)]

@dicko

But that is not the point. I almost like what you guys do but pointing everyone to post a bug because that’s the only way, is perhaps spurious you got to take this thread, and hopefully fix it in short order, right?

Only found this thread because of a ticket actually

[xrobau (Rob Thomas)]

@dicko

pointing everyone to post a bug because that’s the only way, is perhaps spurious

No, that’s the way we keep track of bugs. If there’s not a ticket, there’s not a bug, because we don’t know about it. The only reason THIS thread got attention was because there was a ticket.

Edit: Hah. See? @tm1000 and I are in agreement. We both posted at almost the same time.

[tm1000 (Andrew Nagy)]

That and the OP never replied to feedback on the original ticket that the OP opened. Which is unfortunate

[dicko]

What ticket?, the one you liked to is not there, jesus guys, just fix it and stop dumping on me

[xrobau (Rob Thomas)]

http://issues.freepbx.org/browse/FREEPBX-12058 exists and is publicly visible. It’s linked to http://issues.freepbx.org/browse/FREEPBX-12046 which is NOT public, as it’s tagged as a security issue.