Using caller id to authenticate anyone is asking for a toll fraud problem. 4-digit pins really are not a good idea either.
Try putting your operators and your users in different contexts. If you have specific numbers you don't want the users to be able to dial, then create patterns for those numbers. Play a sound byte that says the call is not allowed and then hang up. -------------------------------------------------- Salvatore Giudice [EMAIL PROTECTED] VoIP Security Training, LLC http://VoIPSecurityTraining.com 848 N. Rainbow Blvd. #1676 Las Vegas, NV 89107 Phone: (702) 979-2906 Fax: (212) 279-2906 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dovid B Sent: Sunday, April 01, 2007 5:54 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] Security on long distance calls Or you can do exten => _011.,1,Authenticate(1234) exten => _011.,2,Dial(SIP/[EMAIL PROTECTED] <mailto:SIP/[EMAIL PROTECTED]> ) Also this is a bit more complicated but you can do it by sip extension. If CID of phone = phone that is allowed then let it go out..... This will be hard considering you will have to make a gotoif for every extension that you want to allow to call intl. ----- Original Message ----- From: Rizwan Hisham <mailto:[EMAIL PROTECTED]> To: Asterisk Users Mailing List - <mailto:asterisk-users@lists.digium.com> Non-Commercial Discussion Sent: Friday, March 30, 2007 11:18 AM Subject: Re: [asterisk-users] Security on long distance calls For operator: [longdistance] include=> local include=> International for extensions: [localcalls] include=> local now assign longdistance context to operator and localcalls context to every other user for whom you want to restrict intl calls [local] should include all local extension codes [International] should include all international extension codes you get my point? On 3/30/07, Stefano Corsi <[EMAIL PROTECTED]> wrote: Hello, which kind of method could you use to inhibit long distance calls to _some_ extensions? Is there a way to do it with freepbx or you have to do it manually in the config files? I wouldn't like to set a route password, because that is not confortable for the pbx operator. I just would like the operator being able to call whatever number, while the extensions should only be able to make local calls. Thanks Stefano _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -- Regards Rizwan Hisham Software Engineer _____ _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
_______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users