When you call my system your call is handled by the auto attendant. It works fine with one little problem. In addition to being able to dial any extension during the announcement, you can dial a telephone number. The system will bridge the Zap channel I call in on with another Zap channel and dial the number. This allows anyone in the world to make calls to anywhere in the world via my system. While this is fine for extensions logged into my system. It is not good to allow unknown users to make calls via my system. How can I restrict access to connected users only? Thanks for putting up with a post from a newbie. -Ed
Ed DeHart wrote:> How can I restrict access to connected users only?show application Disa lets you set a pin number before allowing outside dialing... -- Best regards, Duane http://www.cacert.org - Free Security Certificates http://www.nodedb.com - Think globally, network locally http://www.sydneywireless.com - Telecommunications Freedom http://happysnapper.com.au - Sell your photos over the net! http://e164.org - Using Enum.164 to interconnect asterisk servers "I do not try to dance better than anyone else. I only try to dance better than myself."
simple solution, just transfer each call into a conference.... On Wed, 13 Oct 2004 21:08:41 -0400, Ed DeHart wrote:>When you call my system your call is handled by the auto >attendant. It works fine with one little problem. In addition >to being able to dial any extension during the announcement, you >can dial a telephone number. The system will bridge the Zap >channel I call in on with another Zap channel and dial the number. >This allows anyone in the world to make calls to anywhere in the >world via my system. > >While this is fine for extensions logged into my system. It >is not good to allow unknown users to make calls via my system. >How can I restrict access to connected users only? > >Thanks for putting up with a post from a newbie. > > -Ed > >_______________________________________________ >Asterisk-Users mailing list >Asterisk-Users@lists.digium.com >http://lists.digium.com/mailman/listinfo/asterisk-users >To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users.
On Thu, 2004-10-14 at 11:08, Ed DeHart wrote:> When you call my system your call is handled by the auto > attendant. It works fine with one little problem. In addition > to being able to dial any extension during the announcement, you > can dial a telephone number. The system will bridge the Zap > channel I call in on with another Zap channel and dial the number. > This allows anyone in the world to make calls to anywhere in the > world via my system. > > While this is fine for extensions logged into my system. It > is not good to allow unknown users to make calls via my system. > How can I restrict access to connected users only? > > Thanks for putting up with a post from a newbie.I don't know why you got those other responses, they don't seem to be even close to what you need... You need to look at contexts. You should have at least 3 contexts, maybe more: [incoming] All your incoming calls come here and are handled [outgoing] This is where you match something like _9. and dialout [extensions] This is where you define all your internal extensions/desk phones [features] This is where you might have voicemail/etc extensions defined Then, you would "include => extensions" in the incoming context. You would change your zapata.conf to set the "context" to incoming for all channels that are not local. See the example config files, the wiki, and the asterisk docs for more details. Extra hint: Please make sure you do some reading before you just come straight back and ask for a complete example... otherwise you will never really know how to secure your PBX, and might end up with a big surprise phone bill. Regards, Adam
steve@daviesfam.org
2004-Oct-13 23:58 UTC
[Asterisk-Users] restricting access to outside calls
On Wed, 13 Oct 2004, Ed DeHart wrote:> When you call my system your call is handled by the auto > attendant. It works fine with one little problem. In addition > to being able to dial any extension during the announcement, you > can dial a telephone number. The system will bridge the Zap > channel I call in on with another Zap channel and dial the number. > This allows anyone in the world to make calls to anywhere in the > world via my system. > > While this is fine for extensions logged into my system. It > is not good to allow unknown users to make calls via my system. > How can I restrict access to connected users only?Hi, What did you say your phone number was, again? ;-) You need to make sure that your inbound calls from the PSTN are handled in a different context which does not have the exten patterns that allow dialling out. The extensions.conf.sample shows the idea, but something like: [dialout] ; here are the rules for dialling out, eg: exten => _XXXXXXXXXX,1,Dial(Zap/....) [extens] ; here are your extensions [incomingcalls] ; here is where the incoming calls go include => extens exten => s,1,Answer exten => s,2,Background(press-1-for-sales-etc) [localusers] ; this is the context used for local phones or others that we allow to ; cost us money include => extens include => dialout You set the right context for the inbound interfaces and local interfaces in zapata.conf or sip.conf etc if they are not zap/ itnerfaces. Hope this helps! Steve
This is done with contexts. The context that incoming calls from the telco land in is allowed to dial out. See the MANY examples on the web, including www.fnords.org/~eric/asterisk for examples of asterisk configurations> > On Wed, 13 Oct 2004 21:08:41 -0400, Ed DeHart wrote: > > >>When you call my system your call is handled by the auto >>attendant. It works fine with one little problem. In addition >>to being able to dial any extension during the announcement, you >>can dial a telephone number. The system will bridge the Zap >>channel I call in on with another Zap channel and dial the number. >>This allows anyone in the world to make calls to anywhere in the >>world via my system. >> >>While this is fine for extensions logged into my system. It >>is not good to allow unknown users to make calls via my system. >>How can I restrict access to connected users only? >> >>Thanks for putting up with a post from a newbie.