Tricks and Treats of the AUTOVON

by N-Tolerant

     The AUTOVON (Automatic Voice Network) is the military's worldwide switch
system used to link all DOD installations together on one telephone network.
It is not a secure communications system.  Classified information is discussed
over the AUTOVON only when a secure telephone such as a STU-3 or a STU-5 is
used.  Otherwise, it works much like the normal telephone systems you use
every day.  The functional switching technology, however, is very similar to
that of the outdated telephone networks of years long past.  I recommend that
you read ShAdOOwRuNnErs "Intro to Automatic Voice Network Commonly known as
AUTOVON" parts one thru three for more information, including an introduction,
how to get into AUTOVON using a silver box, and a few tricks to do once you're
inside.  That article can be found at:

	ftp://ftp.fc.net/pub/phrack/underground/misc

In this article I will cover the following:

	1. Common Features
	2. "Area Codes"
	3. Installation Prefixes
	4. Other Phunee Stuff

1. Common Features of AUTOVON Systems

     Once you are connected to the AUTOVON system, there are certain procedures
that you can perform from your phone which activate and cancel functional
features of the system.  Some are trivial, but others can be fun if the user is
creative enough.  These are performed using a standard Touch-Tone phone.  Some
commands vary from installation to installation, but most are universal.

Automatic Call Back

     If the number you are trying to call is busy, this will cause the other 
party's phone to ring once they hang up.  Yours will also ring, and once both 
ends are off-hook, the two phones will be connected.

	Active:
	
	1. Lift receiver.
	2. Dial number.
	3. When busy signal is received, press and release the switchhook.
	4. When dialtone is received, dial "161".
	5. Listen for positive acknowledgment tone (wavering continuous tone).
	6. Replace receiver.
	7. 
	
	Cancel:

	1. Lift receiver.
	2. Listen for dialtone.
	3. Dial "162".
	4. Listen for positive acknowledgment tone.
	5. Replace receiver.

Call Transfer

     To patch someone who calls you to another number.

	1. Press switchhook to put incoming call on hold.
	2. Listen for continuous dialtone.
	3. Dial desired number.
	
	(At this point, you can, but don't have to, wait for the third-party 
	 to answer and announce the caller before you hang up.)

	4. Replace receiver.

	Note: When you have a third-party on line and the original caller on
              hold, you can press and release the switchhook for a three-party
              conference call.

Malicious Call Identification

     Self-explanatory.  Most of us were busted with something like this in our
younger years, before we got smart.

	With caller still on the line:

	1. Depress switchhook
	2. Listen for continuous tone.
	3. Dial "12".
	4. Continue talking.
	5. When conversation ends, dial "114".

	Caller hangs up.

	6. Lift receiver.
	7. Listen for busy tone.
	8. Within 3 seconds, depress switchhook.
	9. Listen for continuous dialtone.
       10. Dial "12".
       11. Replace receiver - Lift receiver.
       12. Dial "114".

Call Forwarding

     Forward incoming calls to another number.

	Activate:

	1. Lift receiver.
	2. Listen for continuous dialtone.
	3. Dial "131" and second-part number.
	4. Listen for wavering continuous tone (positive acknowledgment).
	5. Replace receiver.

	Cancel:

	1. Lift receiver.
	2. Listen for intermittent tone.
	3. Dial "132".
	4. Listen for wavering continuous tone.
	5. Replace receiver.

Deactivate (Lock) Phone

     No incoming or outgoing calls.

	1. Lift receiver.
	2. Listen for dialtone.
	3. Dial "143".
	4. Replace receiver.

Activate (Unlock) Phone

	1. Lift receiver.
	2. Listen for intermittent tone.
	3. Dial "142".
	4. Replace receiver.

2. "Area Codes"

     An AUTOVON telephone number is in the same format as a regular U.S. number
[(NPA) NXX-XXX].  The first part, which is the area code in normal numbers,
identifies the theater to which you are calling.  The AUTOVON codes are as
follows:

	CONUS (Continental U.S.) - 312
	Canada - 312
	Europe - 314
	Asia/Pacific - 315
	Alaska - 317
	Caribbean - 313
	Persian Gulf - 316, 318

3. Installation Prefixes

     Each DOD installation has its own three-digit prefix (like cities on
civilian systems).  Some larger military bases or installations may have more
than one prefix.  It would take way too much space to list all of them, but
here's an abbreviated list:

	CONUS (312)
	Ft. McClellan, AL - 865
	Yuma Proving Ground, AZ - 879
	Ft. Irwin, CA - 470
	Ft. Carson, CO - 691
	Ft. McNair, DC - 227
	Ft. Leavenworth, KS - 552
	Ft. Meade, MD - 923
	U.S. Military Academy, NY - 688
	Ft. Sam Houston, TX - 471
	Port Hueneme Naval Construction Battalion Ctr, CA - 551
	Naval Security Station, DC - 288
	Key West Naval Air Station, FL - 483
	Great Lakes Naval Training Center, IL - 792
	U.S. Naval Academy, MD - 281
	McClellan AFB, CA - 633
	Los Angeles AFB, CA - 833
	U.S. Air Force Academy, CO - 333
	Mountain Home AFB, ID - 728
	Andrews AFB, MD - 858
	Hanscom AFB, MA - 478
	Nellis AFB, NV - 682
	Tinker AFB, OK - 884
	Lackland AFB, TX - 473
	McChord AFB, WA - 984
	Hill AFB, UT - 777
	The Pentagon, DC - 227

	Canada (312)
	Air Command Winnipeg - 826
	Air Defense Headquarters, Ontario - 628
	Calgary CFB - 620
	Military Area Pacific Headquarters, Vancouver - 252
	
	Europe (314)
	Stuttgart, Germany - 420	
	Mannheim, Germany - 380
	Vicenza, Italy - 634
	Naples, Italy - 625
	Rota, Spain - 727
	Moron, Spain - 722
	Ramstein, Germany - 480
	Mildenhall, UK - 238
	Aviano, Italy - 632
	Incirlik, Turkey - 676

	Asia/Pacific (315)
	Camp Red Cloud, Korea - 732
	Camp Humphreys, Korea - 753
	Yokota AB, Japan - 225
	Misawa AB, Japan - 226
	Kadena AB, Japan - 630
	Kunsan AB, Korea - 782
	Anderson AFB, Guam - 366
	Pearl Harbor Naval Complex, HI - 471
	Hickam AFB, HI - 471

	Alaska (317)
	Ft. Richardson - 384
	Adak Naval Air Facility - 692
	
	Caribbean (313)
	Howard AFB, Panama - 284
	Ft. Buchanan, Puerto Rico - 740
	Air National Guard, San Juan, Puerto Rico - 740

	Persian Gulf
	Dharan (318) - 828
	Riyadh (316) - 435

4. Other Phunee Stuff

     If you are going to explore the world of the AUTOVON, there are some
bits of knowledge that might make your journey more interesting, useful, and 
phun.  Here are a few of those bits:

     The AUTOVON prefix for an installation is not the same as the civilian
prefix.  The last part of the number is the same for wherever you are calling,
but the prefix will rarely, if ever, be the same.

     Not all phone lines on the AUTOVON have worldwide capability.  Some only
have theater capability.  For instance, most phones in the European theater
(Great Britain, Germany, Italy, etc.) can call AUTOVON phones within Europe,
but no beyond.  Common worldwide-capable lines are installation operator,
installation commander, other high-ranking officials/officers, and technical
control facility lines.  Worldwide lines are much more common at
stateside installations.  Note: All AUTOVON phones can receive worldwide calls.

     The common number for the installation operator is "XXX-1110" ("XXX being
the prefix for that installation).  The operator can do just about anything,
such as transfer your call to a local number or patch you through to another
installation.  It sometimes takes social engineering to get a favor from a
switch operator.  It also depends on the installation policy on such matters.
I recommend operators at Air Force bases.  They seem more willing that others
such as Army or Navy.

     Some places have automated switches that will allow you to dial out to a
local number (or toll-free number).  One such place is Fort Bragg, NC.  You
dial (312) 236-0001 and a recording will give you some options.

     Sometimes AUTOVON calls are cut-off.  This could be because of a time 
limit.  Sometimes calls are preempted, though.  This means that the trunk
you were using was seized by another phone by way of priority keys.