Calls to non allowed countries are still possible somehow!

[davide.bonavita]

Good morning all,
I've just found out that I can still make calls to forbidden country codes with my current setup!

I've got this test provider to which I need to add three "000" in front of the called numbers in order to use their premium routes, and this makes possible to call any forbidden region! (e.g. I've successfully called the Scrocchiarella Pizzeria in Moscow even if I couldn't )
The question is: is it a bug or a feature?

 

[NicholasP_3CX]

The Allowed countries list is only triggered when the outbound rules send your international dialling code to the provider.

In your E164 settings of the PBX you can define the International Dialling prefix, which depending on the country, can be 00, 011 (USA) or 0011 (Australia). These are just a few examples.

As you can see from my PBX, which is based in Cyprus, I have 00.



Now, the PBX will detect when i send 00 or a + (the + character is always considered international, no matter which country you have selected)

It will do this check with the list AFTER the reformatting of the number dialled in the outbound rule's Routes.

So essentially, you are bypassing the check by sending 000. The PBX does not consider this as an international call.

I would recommend, if your provider gives you the option, of also limiting the countries you can call from their portal as well, as this is not standard behaviour.

Try calling Moscow with +7 or 007. You will not be able to as the PBX will be limiting the call.

 

[Saqqara]

Are you sure you are block the require countries, Settings - Security Settings - Allowed Country Codes.

 

[davide.bonavita]

Thanks @NicholasP_3CX, that was my though as well, it makes sense that 3CX makes its checks AFTER whatever reformatting we make as that would be the final number sent to the provider to be called.

 

[NicholasP_3CX]

What I would do in your case, is probably add 000 as your international dialling code, and then just modify outgoing numbers for any other provider as + and not 00. So even if a user dials 00, they will be reformatted to + and be filtered by the PBX Allowed Country Codes list.