On 09/13/2013 04:12 PM, jg wrote:
Is there a general recipe to avoid fraudulent calls under the following conditions?

A receptionist transfers calls as a callee (customers are calling) and as a caller (boss asks to call and then transfer to him), i.e. the Dial cmd for the internal context contains "Tt". Then an outside call would operate as a Local channel in an internal context after the first transfer. If the internal context allows to dial outside, which is quite common, then this can be abused by the outside caller.

An obvious solution is to disallow Local channels to call outside lines, but there are some possible side effects if Local channels are used explicitly. This would require adding a persistent channel variable (the ones with "__").

create a separate context for outbound calls.

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to