-----------------
Comdial Voicemail
-----------------

* Common in independent telco business offices, small 32/- extension installations, places near the
manufacturing plant (central Virginia)

* Common Default Mailboxes 800,801,821 (routing boxes), 888 (operator box), 70 (administrator box)

* Default password is same as mailbox number

*Configuration for the entire system can be administered through a database in the administrator mailbox menu. It's default password is either 1234 or the last four digits of the bar code on the white sticker on the bottom of the unit. Configuration parameters
are unlabeled, but can be found in a supervisor guide PDF.

-----------------------
Mitel Express Messenger
-----------------------

* Common in hotels, Canada, newer PBXes with a large number of analog lines

* Common Default Mailboxes 9999/999/99 depending on number of digits per box (administrator), possibly
98 (administration modem), 90-97/990-997/9990-9997 depending on number of digits per box (reserved for
self-administration), 0 (operator)

* Default administrator password is 8642, or possibly 1234 as well. Default password for all other
boxes is 9999. If passcode length is longer, fill the rest of the digits up with zeroes. For example,
999900.

* If the personal contact numbers feature is enabled, normal subscribers can have digits route to other
phones like an auto-attendant. The idea is to reach someone's cell/home/pager number, so outside line
use is common, but likely designed to be easy to audit in the CDRs.

* Like the Comdial systems, parameters for the VMS can be setup through the administrator's mailbox -
it's option 9. There's no password, and you can use it to turn on features as well. The tradeoff is
Mitel likes to keep their code list a deep, dark secret. They're called Technician Function codes, and
an index supposedly comes with their installer training materials.

-------------------------------
Nortel Callpilot, Meridian Mail
-------------------------------

* Common in grocery stores, hotels (Rio, anyone?), schools, office complexes, older bank installations,
a handful of universities, every building in Canada

* Common default mailboxes are 10/100/1000 (general delivery), 12/102/1002 (administrator mailbox),
default password is 0000

* Will not allow the administrator to log in from outside for first time setup

* Forces mailbox password to be changed during first time setup, will not allow passwords that start
with 0

* 0 + the extension number can be used to transfer on some systems

* Can occasionally be heard automatically coming over the PA in grocery stores, such as Safeway, and
paging people automatically

* Very similar sounding, but Meridian Mail runs on OS/2, Callpilot on Windows.

* Can be configured to automatically catch people dialing sequential numbers. During transfers, instead
of taking a slight pause before telling you a number is invalid, it'll do that right away. If you ever
think it's doing this, try an extension you know (it won't only transfer you to extensions you've
already tried), or hang up and call back in.

* Callpilot models can be configured to alert the administrator of bruteforcing attempts. The default
action is to hang up on someone after three invalid attempts, and lock a voicemail after nine [I think,
I'll have to check; it's listed in a manual somewhere] attempts. It'll also go out of it's way to
alert the admins when it locks a mailbox.

* Pressing C will make the voicemail system stop what it's doing, and respond with a D tone. Responding to that with a * will make it spit out three keys [I *think* it's *16, but I could be wrong] a few times before hanging up. What this does is anyone's guess, but all Nortel VMSes do it, and none of it is documented. Manufacturer backdoor, maybe?

------------------------------------------
Innovative Systems Applications Peripheral
------------------------------------------

* Common for subscribers on switches run by independent telcos

* Common default password is 0000

* Allows messages to be marked as new

* Return calls can be placed to whomever leaves a message

--------------
Lucent Anypath
--------------

* Common in Canada, older cellular installations, some urban wireline areas such as Verizon New York

* Drop-in replacement for Octel? 999-999-9999 is a common, possibly administrator default mailbox

* Frequently configured to read back someone's number and the number of attempts they've made if they
make a bad attempt to log into your mailbox

* Commonly forces you to change your password on the first login

----------
Metaswitch
----------

* Common for independent telcos who've installed a Metaswitch softswitch, but also used as a
centralized voicemail for all switches by Frontier, Windstream, ex-Embarq Centurylink areas

* Default password is typically same as last four digits of phone number

* ex-Embarq system has custom prompts, but don't be fooled; if you sit and do nothing at a prompt for
your phone number, you'll hear a stock Metaswitch error message

* Typically has a very minimal feature set, but can sometimes be configured to allow 0 to
transfer you to a number of your choosing

* Has an unlisted option to play a strange sound file at the main menu

------------
Glenayre MVP
------------

* Common in paging and mobility applications. System has code custom made for Skytel and several other paging companies. Used by Iridium's civilian and military gateways as it has some form of SMS support. Will occasionally also pop up in independent wireline companies, and CLECs like McLeodUSA/Windstream.

* Was used by Nextel possibly until Ericsson shut down their iDEN network, and Cox until very recently.

* Motorola 68000 based platform with a proprietary OS. Maybe multiple generations of hardware, though; Movius (Glenayre calls themselves this for some reason now) still produces it in some form today.

* Can be configured to route the digit 0 to a number (subject to the digit limit the admin imposes. Usually ten) of your choosing if the feature is enabled. Sadly, Iridium doesn't have it turned on.

----------------
Toshiba Stratagy
----------------

* Common in retail stores, small 32/- extension installations

* Default mailboxes: 999 (administrator), 998 (direct message), 997 (default mailbox template) 996 (default guest mailbox template), 995 (stores all messages awaiting future delivery), 994 (routes all faxes here when fax presence tone is heard), 993 (administration modem; requires Stratagy Admin software), 991 (caller instruction mailbox; think extended auto-attendant greeting), 990 (auto-attendant greeting), 989 (AMIS loopback mailbox; all messages sent here go back to sender), 411 (directory), 0 (operator mailbox)

* Default passwords can be the mailbox number, 8888, or the mailbox number + 997; for example, 999997 for mailbox 999

* Older systems record in ADPCM, new record in CELP-based algorithm, typically have different voices. Some systems exist with newer voice and ADPCM

* Hold music can be recorded from administrator mailbox

-----------
Avaya Octel
-----------
* Common in older large PBXes such as universities, Canada

* Because of how the date is determined by Octel 250 and 350 systems, it's calendar will reset back to 1984 on November 24th, 2015 a-la Y2K. Barring someone making a patch or setting the year back, those two particular models won't work beyond that date.

-----------------------------------
Centigram Voicememo and descendants
-----------------------------------

* Common in large installations, such as universities, and hotels. Also in use as a central office voicemail system from occasional LECs. Logix Communications will use these exclusively for CO voicemail.

* The original models run on a single board computer on an ISA slot, based on anything from a 386 to a Pentium

* Originally manufactured by Centigram, but eventually ended up in the hands of Mitel, Baypoint, Fujitsu, and SS8. You'll mostly run into Mitel systems on PBX installations.

* Default behavior is to not prompt for a password at all; pressing * will log in.

* Default mailboxes are 999 (attendant), 998 (administrator). If mailbox extensions are more digits, fill in with more nines. For example, on 10-digit CO voicemail systems, the administrator mailbox would be 999-999-9998

* Pressing * at almost anything (including the recording it plays before it hangs up on you) will bring you back to the main menu

---------------------
Cisco Unity Voicemail
---------------------

* Common in banks, smaller office complexes, schools, some retail stores

* Default mailboxes are 99999, 99990; Example Administrator, and Example Subscriber. Some will reverse the order of which belongs to the administrator and subscriber extensions, and others will assign 99990 to an operator mailbox. Regardless, they'll all be in the name directory by default

* Frequently paired with a Cisco Callmanager, but not unheard of to be used as a third party voicemail system

* Getting an extension prompt under organic circumstances can be difficult. To access it, press * to get a login prompt, and then ##

* Possibly based on a NEC system, or vice versa. The NEAXMail VMS at the Dallas/Fort Worth airport is eerily similar