9 thoughts on - Asterisk Prefix Code To Dial A High Fraud Country – Security Mechanism

• Hello motty,

  Thursday, September 18, 2014, 6:35:40 PM, you wrote:

  I use this

  exten => _0041,1,Log(NOTICE,Pin Code for Switzerland calls)
  same => n,Playback(silence/1)
  same => n,Authenticate(9084,,4)
  same => n,Macro(outgoingTrunk,${EXTEN})
  same => n,Hangup()

  It uses a fixed PIN number which calls a macro which deals with the actual dialling, but a standard Dial command would work here too. Quick and easy, but there are lots of options. If the correct PIN is not entered, the call is not made.

  —
  Best regards, Julian mailto:jb_soft@trink.co.uk

  —

• Thank you Julian,

  would it be possible to block calls to international calls except certain countries? I just want to make sure that if attackers try to place calls outside the states they not succeed.

  Thanks, Motty

• WW91ciBxdWVzdGlvbiBkZW1vbnN0cmF0ZXMgYSBmdW5kYW1lbnRhbCBsYWNrIG9mIEFzdGVyaXNr IGNvbmNlcHRzIGFuZCBrbm93bGVkZ2UuICBZb3Ugc2hvdWxkIHN0YXJ0IGJ5IHJlYWRpbmcgaHR0
  cDovL3d3dy5hc3Rlcmlza2RvY3Mub3JnLyBhbmQgZ28gZnJvbSB0aGVyZS4gICAgQXN0ZXJpc2sg aXMgbm90IHNvbWV0aGluZyB5b3UgY2FuIGxlYXJuIGluIGEgZmV3IGRheXMuDQoNCkZyb206IGFz dGVyaXNrLXVzZXJzLWJvdW5jZXNAbGlzdHMuZGlnaXVtLmNvbSBbbWFpbHRvOmFzdGVyaXNrLXVz ZXJzLWJvdW5jZXNAbGlzdHMuZGlnaXVtLmNvbV0gT24gQmVoYWxmIE9mIG1vdHR5IGNydXoNClNl bnQ6IFRodXJzZGF5LCBTZXB0ZW1iZXIgMTgsIDIwMTQgNDo1MiBQTQ0KVG86IEFzdGVyaXNrIFVz ZXJzIE1haWxpbmcgTGlzdCAtIE5vbi1Db21tZXJjaWFsIERpc2N1c3Npb24NClN1YmplY3Q6IFJl OiBbYXN0ZXJpc2stdXNlcnNdIEFzdGVyaXNrIHByZWZpeCBjb2RlIHRvIGRpYWwgYSBoaWdoIGZy YXVkIGNvdW50cnkgLSBzZWN1cml0eSBtZWNoYW5pc20NCg0KVGhhbmsgeW91IEp1bGlhbiwNCg0K
  d291bGQgaXQgYmUgcG9zc2libGUgdG8gYmxvY2sgY2FsbHMgdG8gaW50ZXJuYXRpb25hbCBjYWxs cyBleGNlcHQgY2VydGFpbiBjb3VudHJpZXM/IEkganVzdCB3YW50IHRvIG1ha2Ugc3VyZSB0aGF0
  IGlmIGF0dGFja2VycyB0cnkgdG8gcGxhY2UgY2FsbHMgb3V0c2lkZSB0aGUgc3RhdGVzIHRoZXkg bm90IHN1Y2NlZWQuDQoNClRoYW5rcywNCk1vdHR5DQoNCk9uIFRodSwgU2VwIDE4LCAyMDE0IGF0
  IDEyOjU1IFBNLCBKdWxpYW4gQmVhY2ggPGpiX3NvZnRAdHJpbmsuY28udWs8bWFpbHRvOmpiX3Nv ZnRAdHJpbmsuY28udWs+PiB3cm90ZToNCkhlbGxvIG1vdHR5LA0KDQpUaHVyc2RheSwgU2VwdGVt YmVyIDE4LCAyMDE0LCA2OjM1OjQwIFBNLCB5b3Ugd3JvdGU6DQoNCj4gSGVsbG8sIEkgd291bGQg dG8gYWxsb3cgdXNlcnMgdG8gcGxhY2UgY2FsbHMgb3ZlcnNlYXMgc3VjaCBhcyBJbmRpYQ0KPiBh bmQgTWFsYXlzaWEgYnV0IG9ubHkgd2l0aCBhIHNlY3VyaXR5IGNvZGUuIGlmIHRoZXkgZG9uJ3Qg aGF2ZSBhDQo+IHNlY3VyaXR5IGNvZGUgSSB3YW50IHRvIGJlIGFibGUgdG8gZHJvcCB0aGUgY2Fs bHMuDQoNCkkgdXNlIHRoaXMNCg0KZXh0ZW4gPT4gXzAwNDEsMSxMb2coTk9USUNFLFBpbiBDb2Rl IGZvciBTd2l0emVybGFuZCBjYWxscykNCiAgICAgICAgc2FtZSA9PiBuLFBsYXliYWNrKHNpbGVu Y2UvMSkNCiAgICAgICAgc2FtZSA9PiBuLEF1dGhlbnRpY2F0ZSg5MDg0LCw0KQ0KICAgICAgICBz YW1lID0+IG4sTWFjcm8ob3V0Z29pbmdUcnVuaywke0VYVEVOfSkNCiAgICAgICAgc2FtZSA9PiBu LEhhbmd1cCgpDQoNCkl0ICB1c2VzICBhICBmaXhlZCBQSU4gbnVtYmVyIHdoaWNoIGNhbGxzIGEg bWFjcm8gd2hpY2ggZGVhbHMgd2l0aCB0aGUNCmFjdHVhbCAgZGlhbGxpbmcsICBidXQgIGEgIHN0
  YW5kYXJkICBEaWFsIGNvbW1hbmQgd291bGQgd29yayBoZXJlIHRvby4NClF1aWNrICBhbmQgIGVh c3ksIGJ1dCB0aGVyZSBhcmUgbG90cyBvZiBvcHRpb25zLiBJZiB0aGUgY29ycmVjdCBQSU4gaXMN
  Cm5vdCBlbnRlcmVkLCB0aGUgY2FsbCBpcyBub3QgbWFkZS4NCg0KLS0NCkJlc3QgcmVnYXJkcywN
  CiBKdWxpYW4gICAgICAgICAgICAgICAgICAgICAgICAgICAgbWFpbHRvOmpiX3NvZnRAdHJpbmsu Y28udWs8bWFpbHRvOmpiX3NvZnRAdHJpbmsuY28udWs+DQoNCg0KLS0NCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K
  LS0gQmFuZHdpZHRoIGFuZCBDb2xvY2F0aW9uIFByb3ZpZGVkIGJ5IGh0dHA6Ly93d3cuYXBpLWRp Z2l0YWwuY29tIC0tDQpOZXcgdG8gQXN0ZXJpc2s/IEpvaW4gdXMgZm9yIGEgbGl2ZSBpbnRyb2R1
  Y3Rvcnkgd2ViaW5hciBldmVyeSBUaHVyczoNCiAgICAgICAgICAgICAgIGh0dHA6Ly93d3cuYXN0
  ZXJpc2sub3JnL2hlbGxvDQoNCmFzdGVyaXNrLXVzZXJzIG1haWxpbmcgbGlzdA0KVG8gVU5TVUJT
  Q1JJQkUgb3IgdXBkYXRlIG9wdGlvbnMgdmlzaXQ6DQogICBodHRwOi8vbGlzdHMuZGlnaXVtLmNv bS9tYWlsbWFuL2xpc3RpbmZvL2FzdGVyaXNrLXVzZXJzDQoNCg=

• Thanks Eric, for respectfully pointing that link, it is the reason why I am posting my question for lack of knowledge. I had been working on Asterisk for the last 4 years, I am always learning something knew.

  – Motty

• SXQgaXMgdW5mb3J0dW5hdGUgaHR0cDovL3d3dy5hc3Rlcmlza2RvY3Mub3JnL2VuLzNyZF9FZGl0
  aW9uL2FzdGVyaXNrLWJvb2staHRtbC9hc3Rlcmlzay1ib29rLmh0bWwjYXN0ZXJpc2stRFAtQmFz aWNzLVNFQ1QtMy42IGlzIG5vdCBoZWxwZnVsIHRvIHlvdS4NCg0KRnJvbTogYXN0ZXJpc2stdXNl cnMtYm91bmNlc0BsaXN0cy5kaWdpdW0uY29tIFttYWlsdG86YXN0ZXJpc2stdXNlcnMtYm91bmNl c0BsaXN0cy5kaWdpdW0uY29tXSBPbiBCZWhhbGYgT2YgbW90dHkgY3J1eg0KU2VudDogVGh1cnNk YXksIFNlcHRlbWJlciAxOCwgMjAxNCA1OjI3IFBNDQpUbzogQXN0ZXJpc2sgVXNlcnMgTWFpbGlu ZyBMaXN0IC0gTm9uLUNvbW1lcmNpYWwgRGlzY3Vzc2lvbg0KU3ViamVjdDogUmU6IFthc3Rlcmlz ay11c2Vyc10gQXN0ZXJpc2sgcHJlZml4IGNvZGUgdG8gZGlhbCBhIGhpZ2ggZnJhdWQgY291bnRy eSAtIHNlY3VyaXR5IG1lY2hhbmlzbQ0KDQpUaGFua3MgRXJpYywgZm9yIHJlc3BlY3RmdWxseSBw b2ludGluZyB0aGF0IGxpbmssIGl0IGlzIHRoZSByZWFzb24gd2h5IEkgYW0gcG9zdGluZyBteSBx dWVzdGlvbiBmb3IgbGFjayBvZiBrbm93bGVkZ2UuIEkgaGFkIGJlZW4gd29ya2luZyBvbiBBc3Rl cmlzayBmb3IgdGhlIGxhc3QgNCB5ZWFycywgSSBhbSBhbHdheXMgbGVhcm5pbmcgc29tZXRoaW5n IGtuZXcuDQoNCi0gTW90dHkNCg0KT24gVGh1LCBTZXAgMTgsIDIwMTQgYXQgMjoxNSBQTSwgRXJp YyBXaWVsaW5nIDxFV2llbGluZ0BueWlnYy5jb208bWFpbHRvOkVXaWVsaW5nQG55aWdjLmNvbT4+
  IHdyb3RlOg0KWW91ciBxdWVzdGlvbiBkZW1vbnN0cmF0ZXMgYSBmdW5kYW1lbnRhbCBsYWNrIG9m IEFzdGVyaXNrIGNvbmNlcHRzIGFuZCBrbm93bGVkZ2UuICBZb3Ugc2hvdWxkIHN0YXJ0IGJ5IHJl YWRpbmcgaHR0cDovL3d3dy5hc3Rlcmlza2RvY3Mub3JnLyBhbmQgZ28gZnJvbSB0aGVyZS4gICAg QXN0ZXJpc2sgaXMgbm90IHNvbWV0aGluZyB5b3UgY2FuIGxlYXJuIGluIGEgZmV3IGRheXMuDQoN
  CkZyb206IGFzdGVyaXNrLXVzZXJzLWJvdW5jZXNAbGlzdHMuZGlnaXVtLmNvbTxtYWlsdG86YXN0
  ZXJpc2stdXNlcnMtYm91bmNlc0BsaXN0cy5kaWdpdW0uY29tPiBbbWFpbHRvOmFzdGVyaXNrLXVz ZXJzLWJvdW5jZXNAbGlzdHMuZGlnaXVtLmNvbTxtYWlsdG86YXN0ZXJpc2stdXNlcnMtYm91bmNl c0BsaXN0cy5kaWdpdW0uY29tPl0gT24gQmVoYWxmIE9mIG1vdHR5IGNydXoNClNlbnQ6IFRodXJz ZGF5LCBTZXB0ZW1iZXIgMTgsIDIwMTQgNDo1MiBQTQ0KVG86IEFzdGVyaXNrIFVzZXJzIE1haWxp bmcgTGlzdCAtIE5vbi1Db21tZXJjaWFsIERpc2N1c3Npb24NClN1YmplY3Q6IFJlOiBbYXN0ZXJp c2stdXNlcnNdIEFzdGVyaXNrIHByZWZpeCBjb2RlIHRvIGRpYWwgYSBoaWdoIGZyYXVkIGNvdW50
  cnkgLSBzZWN1cml0eSBtZWNoYW5pc20NCg0KVGhhbmsgeW91IEp1bGlhbiwNCg0Kd291bGQgaXQg YmUgcG9zc2libGUgdG8gYmxvY2sgY2FsbHMgdG8gaW50ZXJuYXRpb25hbCBjYWxscyBleGNlcHQg Y2VydGFpbiBjb3VudHJpZXM/IEkganVzdCB3YW50IHRvIG1ha2Ugc3VyZSB0aGF0IGlmIGF0dGFj a2VycyB0cnkgdG8gcGxhY2UgY2FsbHMgb3V0c2lkZSB0aGUgc3RhdGVzIHRoZXkgbm90IHN1Y2Nl ZWQuDQoNClRoYW5rcywNCk1vdHR5DQoNCk9uIFRodSwgU2VwIDE4LCAyMDE0IGF0IDEyOjU1IFBN
  LCBKdWxpYW4gQmVhY2ggPGpiX3NvZnRAdHJpbmsuY28udWs8bWFpbHRvOmpiX3NvZnRAdHJpbmsu Y28udWs+PiB3cm90ZToNCkhlbGxvIG1vdHR5LA0KDQpUaHVyc2RheSwgU2VwdGVtYmVyIDE4LCAy MDE0LCA2OjM1OjQwIFBNLCB5b3Ugd3JvdGU6DQoNCj4gSGVsbG8sIEkgd291bGQgdG8gYWxsb3cg dXNlcnMgdG8gcGxhY2UgY2FsbHMgb3ZlcnNlYXMgc3VjaCBhcyBJbmRpYQ0KPiBhbmQgTWFsYXlz aWEgYnV0IG9ubHkgd2l0aCBhIHNlY3VyaXR5IGNvZGUuIGlmIHRoZXkgZG9uJ3QgaGF2ZSBhDQo+
  IHNlY3VyaXR5IGNvZGUgSSB3YW50IHRvIGJlIGFibGUgdG8gZHJvcCB0aGUgY2FsbHMuDQoNCkkg dXNlIHRoaXMNCg0KZXh0ZW4gPT4gXzAwNDEsMSxMb2coTk9USUNFLFBpbiBDb2RlIGZvciBTd2l0
  emVybGFuZCBjYWxscykNCiAgICAgICAgc2FtZSA9PiBuLFBsYXliYWNrKHNpbGVuY2UvMSkNCiAg ICAgICAgc2FtZSA9PiBuLEF1dGhlbnRpY2F0ZSg5MDg0LCw0KQ0KICAgICAgICBzYW1lID0+IG4s TWFjcm8ob3V0Z29pbmdUcnVuaywke0VYVEVOfSkNCiAgICAgICAgc2FtZSA9PiBuLEhhbmd1cCgp DQoNCkl0ICB1c2VzICBhICBmaXhlZCBQSU4gbnVtYmVyIHdoaWNoIGNhbGxzIGEgbWFjcm8gd2hp Y2ggZGVhbHMgd2l0aCB0aGUNCmFjdHVhbCAgZGlhbGxpbmcsICBidXQgIGEgIHN0YW5kYXJkICBE
  aWFsIGNvbW1hbmQgd291bGQgd29yayBoZXJlIHRvby4NClF1aWNrICBhbmQgIGVhc3ksIGJ1dCB0
  aGVyZSBhcmUgbG90cyBvZiBvcHRpb25zLiBJZiB0aGUgY29ycmVjdCBQSU4gaXMNCm5vdCBlbnRl cmVkLCB0aGUgY2FsbCBpcyBub3QgbWFkZS4NCg0KLS0NCkJlc3QgcmVnYXJkcywNCiBKdWxpYW4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgbWFpbHRvOmpiX3NvZnRAdHJpbmsuY28udWs8bWFp bHRvOmpiX3NvZnRAdHJpbmsuY28udWs+DQoNCg0KLS0NCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KLS0gQmFuZHdp ZHRoIGFuZCBDb2xvY2F0aW9uIFByb3ZpZGVkIGJ5IGh0dHA6Ly93d3cuYXBpLWRpZ2l0YWwuY29t IC0tDQpOZXcgdG8gQXN0ZXJpc2s/IEpvaW4gdXMgZm9yIGEgbGl2ZSBpbnRyb2R1Y3Rvcnkgd2Vi aW5hciBldmVyeSBUaHVyczoNCiAgICAgICAgICAgICAgIGh0dHA6Ly93d3cuYXN0ZXJpc2sub3Jn L2hlbGxvDQoNCmFzdGVyaXNrLXVzZXJzIG1haWxpbmcgbGlzdA0KVG8gVU5TVUJTQ1JJQkUgb3Ig dXBkYXRlIG9wdGlvbnMgdmlzaXQ6DQogICBodHRwOi8vbGlzdHMuZGlnaXVtLmNvbS9tYWlsbWFu L2xpc3RpbmZvL2FzdGVyaXNrLXVzZXJzDQoNCg0KLS0NCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KLS0gQmFuZHdp ZHRoIGFuZCBDb2xvY2F0aW9uIFByb3ZpZGVkIGJ5IGh0dHA6Ly93d3cuYXBpLWRpZ2l0YWwuY29t IC0tDQpOZXcgdG8gQXN0ZXJpc2s/IEpvaW4gdXMgZm9yIGEgbGl2ZSBpbnRyb2R1Y3Rvcnkgd2Vi aW5hciBldmVyeSBUaHVyczoNCiAgICAgICAgICAgICAgIGh0dHA6Ly93d3cuYXN0ZXJpc2sub3Jn L2hlbGxvDQoNCmFzdGVyaXNrLXVzZXJzIG1haWxpbmcgbGlzdA0KVG8gVU5TVUJTQ1JJQkUgb3Ig dXBkYXRlIG9wdGlvbnMgdmlzaXQ6DQogICBodHRwOi8vbGlzdHMuZGlnaXVtLmNvbS9tYWlsbWFu L2xpc3RpbmZvL2FzdGVyaXNrLXVzZXJzDQoNCg=

• absolutely not what I meant, I really meant to say thank you for respectfully pointing that out.

  -Motty

• DQpNeSBhcG9sb2dpZXMsIEkgbWlzdW5kZXJzdG9vZC4gIEnigJltIGdsYWQgdGhlIGxpbmsgd2Fz IGhlbHBmdWwuDQoNCg0KRnJvbTogYXN0ZXJpc2stdXNlcnMtYm91bmNlc0BsaXN0cy5kaWdpdW0u Y29tIFttYWlsdG86YXN0ZXJpc2stdXNlcnMtYm91bmNlc0BsaXN0cy5kaWdpdW0uY29tXSBPbiBC
  ZWhhbGYgT2YgbW90dHkgY3J1eg0KU2VudDogVGh1cnNkYXksIFNlcHRlbWJlciAxOCwgMjAxNCA1
  OjQ0IFBNDQpUbzogQXN0ZXJpc2sgVXNlcnMgTWFpbGluZyBMaXN0IC0gTm9uLUNvbW1lcmNpYWwg RGlzY3Vzc2lvbg0KU3ViamVjdDogUmU6IFthc3Rlcmlzay11c2Vyc10gQXN0ZXJpc2sgcHJlZml4
  IGNvZGUgdG8gZGlhbCBhIGhpZ2ggZnJhdWQgY291bnRyeSAtIHNlY3VyaXR5IG1lY2hhbmlzbQ0K
  DQphYnNvbHV0ZWx5IG5vdCB3aGF0IEkgbWVhbnQsIEkgcmVhbGx5IG1lYW50IHRvIHNheSB0aGFu ayB5b3UgZm9yIHJlc3BlY3RmdWxseSBwb2ludGluZyB0aGF0IG91dC4NCg0KDQotTW90dHkNCg0K
  T24gVGh1LCBTZXAgMTgsIDIwMTQgYXQgMjozMiBQTSwgRXJpYyBXaWVsaW5nIDxFV2llbGluZ0Bu eWlnYy5jb208bWFpbHRvOkVXaWVsaW5nQG55aWdjLmNvbT4+IHdyb3RlOg0KSXQgaXMgdW5mb3J0
  dW5hdGUgaHR0cDovL3d3dy5hc3Rlcmlza2RvY3Mub3JnL2VuLzNyZF9FZGl0aW9uL2FzdGVyaXNr LWJvb2staHRtbC9hc3Rlcmlzay1ib29rLmh0bWwjYXN0ZXJpc2stRFAtQmFzaWNzLVNFQ1QtMy42
  IGlzIG5vdCBoZWxwZnVsIHRvIHlvdS4NCg0KRnJvbTogYXN0ZXJpc2stdXNlcnMtYm91bmNlc0Bs aXN0cy5kaWdpdW0uY29tPG1haWx0bzphc3Rlcmlzay11c2Vycy1ib3VuY2VzQGxpc3RzLmRpZ2l1
  bS5jb20+IFttYWlsdG86YXN0ZXJpc2stdXNlcnMtYm91bmNlc0BsaXN0cy5kaWdpdW0uY29tPG1h aWx0bzphc3Rlcmlzay11c2Vycy1ib3VuY2VzQGxpc3RzLmRpZ2l1bS5jb20+XSBPbiBCZWhhbGYg T2YgbW90dHkgY3J1eg0KU2VudDogVGh1cnNkYXksIFNlcHRlbWJlciAxOCwgMjAxNCA1OjI3IFBN
  DQoNClRvOiBBc3RlcmlzayBVc2VycyBNYWlsaW5nIExpc3QgLSBOb24tQ29tbWVyY2lhbCBEaXNj dXNzaW9uDQpTdWJqZWN0OiBSZTogW2FzdGVyaXNrLXVzZXJzXSBBc3RlcmlzayBwcmVmaXggY29k ZSB0byBkaWFsIGEgaGlnaCBmcmF1ZCBjb3VudHJ5IC0gc2VjdXJpdHkgbWVjaGFuaXNtDQoNClRo YW5rcyBFcmljLCBmb3IgcmVzcGVjdGZ1bGx5IHBvaW50aW5nIHRoYXQgbGluaywgaXQgaXMgdGhl IHJlYXNvbiB3aHkgSSBhbSBwb3N0aW5nIG15IHF1ZXN0aW9uIGZvciBsYWNrIG9mIGtub3dsZWRn ZS4gSSBoYWQgYmVlbiB3b3JraW5nIG9uIEFzdGVyaXNrIGZvciB0aGUgbGFzdCA0IHllYXJzLCBJ
  IGFtIGFsd2F5cyBsZWFybmluZyBzb21ldGhpbmcga25ldy4NCg0KLSBNb3R0eQ0KDQpPbiBUaHUs IFNlcCAxOCwgMjAxNCBhdCAyOjE1IFBNLCBFcmljIFdpZWxpbmcgPEVXaWVsaW5nQG55aWdjLmNv bTxtYWlsdG86RVdpZWxpbmdAbnlpZ2MuY29tPj4gd3JvdGU6DQpZb3VyIHF1ZXN0aW9uIGRlbW9u c3RyYXRlcyBhIGZ1bmRhbWVudGFsIGxhY2sgb2YgQXN0ZXJpc2sgY29uY2VwdHMgYW5kIGtub3ds ZWRnZS4gIFlvdSBzaG91bGQgc3RhcnQgYnkgcmVhZGluZyBodHRwOi8vd3d3LmFzdGVyaXNrZG9j cy5vcmcvIGFuZCBnbyBmcm9tIHRoZXJlLiAgICBBc3RlcmlzayBpcyBub3Qgc29tZXRoaW5nIHlv dSBjYW4gbGVhcm4gaW4gYSBmZXcgZGF5cy4NCg0KRnJvbTogYXN0ZXJpc2stdXNlcnMtYm91bmNl c0BsaXN0cy5kaWdpdW0uY29tPG1haWx0bzphc3Rlcmlzay11c2Vycy1ib3VuY2VzQGxpc3RzLmRp Z2l1bS5jb20+IFttYWlsdG86YXN0ZXJpc2stdXNlcnMtYm91bmNlc0BsaXN0cy5kaWdpdW0uY29t PG1haWx0bzphc3Rlcmlzay11c2Vycy1ib3VuY2VzQGxpc3RzLmRpZ2l1bS5jb20+XSBPbiBCZWhh bGYgT2YgbW90dHkgY3J1eg0KU2VudDogVGh1cnNkYXksIFNlcHRlbWJlciAxOCwgMjAxNCA0OjUy IFBNDQpUbzogQXN0ZXJpc2sgVXNlcnMgTWFpbGluZyBMaXN0IC0gTm9uLUNvbW1lcmNpYWwgRGlz Y3Vzc2lvbg0KU3ViamVjdDogUmU6IFthc3Rlcmlzay11c2Vyc10gQXN0ZXJpc2sgcHJlZml4IGNv ZGUgdG8gZGlhbCBhIGhpZ2ggZnJhdWQgY291bnRyeSAtIHNlY3VyaXR5IG1lY2hhbmlzbQ0KDQpU
  aGFuayB5b3UgSnVsaWFuLA0KDQp3b3VsZCBpdCBiZSBwb3NzaWJsZSB0byBibG9jayBjYWxscyB0
  byBpbnRlcm5hdGlvbmFsIGNhbGxzIGV4Y2VwdCBjZXJ0YWluIGNvdW50cmllcz8gSSBqdXN0IHdh bnQgdG8gbWFrZSBzdXJlIHRoYXQgaWYgYXR0YWNrZXJzIHRyeSB0byBwbGFjZSBjYWxscyBvdXRz aWRlIHRoZSBzdGF0ZXMgdGhleSBub3Qgc3VjY2VlZC4NCg0KVGhhbmtzLA0KTW90dHkNCg0KT24g VGh1LCBTZXAgMTgsIDIwMTQgYXQgMTI6NTUgUE0sIEp1bGlhbiBCZWFjaCA8amJfc29mdEB0cmlu ay5jby51azxtYWlsdG86amJfc29mdEB0cmluay5jby51az4+IHdyb3RlOg0KSGVsbG8gbW90dHks DQoNClRodXJzZGF5LCBTZXB0ZW1iZXIgMTgsIDIwMTQsIDY6MzU6NDAgUE0sIHlvdSB3cm90ZToN
  Cg0KPiBIZWxsbywgSSB3b3VsZCB0byBhbGxvdyB1c2VycyB0byBwbGFjZSBjYWxscyBvdmVyc2Vh cyBzdWNoIGFzIEluZGlhDQo+IGFuZCBNYWxheXNpYSBidXQgb25seSB3aXRoIGEgc2VjdXJpdHkg Y29kZS4gaWYgdGhleSBkb24ndCBoYXZlIGENCj4gc2VjdXJpdHkgY29kZSBJIHdhbnQgdG8gYmUg YWJsZSB0byBkcm9wIHRoZSBjYWxscy4NCg0KSSB1c2UgdGhpcw0KDQpleHRlbiA9PiBfMDA0MSwx LExvZyhOT1RJQ0UsUGluIENvZGUgZm9yIFN3aXR6ZXJsYW5kIGNhbGxzKQ0KICAgICAgICBzYW1l ID0+IG4sUGxheWJhY2soc2lsZW5jZS8xKQ0KICAgICAgICBzYW1lID0+IG4sQXV0aGVudGljYXRl KDkwODQsLDQpDQogICAgICAgIHNhbWUgPT4gbixNYWNybyhvdXRnb2luZ1RydW5rLCR7RVhURU59
  KQ0KICAgICAgICBzYW1lID0+IG4sSGFuZ3VwKCkNCg0KSXQgIHVzZXMgIGEgIGZpeGVkIFBJTiBu dW1iZXIgd2hpY2ggY2FsbHMgYSBtYWNybyB3aGljaCBkZWFscyB3aXRoIHRoZQ0KYWN0dWFsICBk aWFsbGluZywgIGJ1dCAgYSAgc3RhbmRhcmQgIERpYWwgY29tbWFuZCB3b3VsZCB3b3JrIGhlcmUg dG9vLg0KUXVpY2sgIGFuZCAgZWFzeSwgYnV0IHRoZXJlIGFyZSBsb3RzIG9mIG9wdGlvbnMuIElm IHRoZSBjb3JyZWN0IFBJTiBpcw0Kbm90IGVudGVyZWQsIHRoZSBjYWxsIGlzIG5vdCBtYWRlLg0K
  DQotLQ0KQmVzdCByZWdhcmRzLA0KIEp1bGlhbiAgICAgICAgICAgICAgICAgICAgICAgICAgICBt YWlsdG86amJfc29mdEB0cmluay5jby51azxtYWlsdG86amJfc29mdEB0cmluay5jby51az4NCg0K
  DQotLQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQotLSBCYW5kd2lkdGggYW5kIENvbG9jYXRpb24gUHJvdmlkZWQg YnkgaHR0cDovL3d3dy5hcGktZGlnaXRhbC5jb20gLS0NCk5ldyB0byBBc3Rlcmlzaz8gSm9pbiB1
  cyBmb3IgYSBsaXZlIGludHJvZHVjdG9yeSB3ZWJpbmFyIGV2ZXJ5IFRodXJzOg0KICAgICAgICAg ICAgICAgaHR0cDovL3d3dy5hc3Rlcmlzay5vcmcvaGVsbG8NCg0KYXN0ZXJpc2stdXNlcnMgbWFp bGluZyBsaXN0DQpUbyBVTlNVQlNDUklCRSBvciB1cGRhdGUgb3B0aW9ucyB2aXNpdDoNCiAgIGh0
  dHA6Ly9saXN0cy5kaWdpdW0uY29tL21haWxtYW4vbGlzdGluZm8vYXN0ZXJpc2stdXNlcnMNCg0K
  DQotLQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQotLSBCYW5kd2lkdGggYW5kIENvbG9jYXRpb24gUHJvdmlkZWQg YnkgaHR0cDovL3d3dy5hcGktZGlnaXRhbC5jb20gLS0NCk5ldyB0byBBc3Rlcmlzaz8gSm9pbiB1
  cyBmb3IgYSBsaXZlIGludHJvZHVjdG9yeSB3ZWJpbmFyIGV2ZXJ5IFRodXJzOg0KICAgICAgICAg ICAgICAgaHR0cDovL3d3dy5hc3Rlcmlzay5vcmcvaGVsbG8NCg0KYXN0ZXJpc2stdXNlcnMgbWFp bGluZyBsaXN0DQpUbyBVTlNVQlNDUklCRSBvciB1cGRhdGUgb3B0aW9ucyB2aXNpdDoNCiAgIGh0
  dHA6Ly9saXN0cy5kaWdpdW0uY29tL21haWxtYW4vbGlzdGluZm8vYXN0ZXJpc2stdXNlcnMNCg0K
  DQotLQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQotLSBCYW5kd2lkdGggYW5kIENvbG9jYXRpb24gUHJvdmlkZWQg YnkgaHR0cDovL3d3dy5hcGktZGlnaXRhbC5jb20gLS0NCk5ldyB0byBBc3Rlcmlzaz8gSm9pbiB1
  cyBmb3IgYSBsaXZlIGludHJvZHVjdG9yeSB3ZWJpbmFyIGV2ZXJ5IFRodXJzOg0KICAgICAgICAg ICAgICAgaHR0cDovL3d3dy5hc3Rlcmlzay5vcmcvaGVsbG8NCg0KYXN0ZXJpc2stdXNlcnMgbWFp bGluZyBsaXN0DQpUbyBVTlNVQlNDUklCRSBvciB1cGRhdGUgb3B0aW9ucyB2aXNpdDoNCiAgIGh0
  dHA6Ly9saXN0cy5kaWdpdW0uY29tL21haWxtYW4vbGlzdGluZm8vYXN0ZXJpc2stdXNlcnMNCg0K

• Not many people are going to want to answer this definitively, I suspect, for fear of being blamed if you copy what they did, it doesn’t work for you and you get landed with huge bills for calls you didn’t make. Securing Asterisk is never as easy as you think.

  However, if you look back through my own posts, I did post some dialplan code a short while ago, relating to a PIN entry. Feel free to borrow that and play around with it; but note, I will not accept any responsibility for it not being as secure as you thought!

  Another thing to consider would be only allowing overseas calls from a particulat context; any extension that does not require the ability to call abroad should be placed in a different default context. If you know you will only ever need to call a restricted range of foreign numbers, consider giving them “short codes” — endpoints effectively within your own internal numbering scheme — and sending calls to _00X. to a recorded message.

  [overseas-offices]
  ; this context is only for phones which need the ability to call overseas

  ; 8000 is office in France exten => 8000,1,Set(CALLERID(num)=${OUTGOING_IDENT})
  exten => 8000,n,Dial(${OUT_TRUNK}/0033251478820,180)
  exten => 8000,n,Hangup()

  ; 8010 is office in India exten => 8010,1,Set(CALLERID(num)=${OUTGOING_IDENT})
  exten => 8010,n,Dial(${OUT_TRUNK}/00918322494200,180)
  exten => 8010,n,Hangup()

  ; …..

  [default]
  ; play suitably sarchastic announcement to chancers
  _00X.,1,Play(ajs-not_allowed)
  _00X.,n,Hangup()

  Basically, be paranoid; and even then, don’t forget, you probably aren’t being paranoid enough.

• Thank you AJ, I will certainly not copy and past; I want to believe I
  understand the risk. I needed some kind of direction, thank you for your support.

  -Motty