restrict "all but" inbound numbers

[strelok89]

hi i have door phone , and i want the option to drop all calls but whistled numbers . as security measure , so only allowed people can open the door for them self.

i can't figure it out

 

[strelok89]

Any way to make it work? Just standard ACL on did

 

[leejor]

Are you talking about someone at the doorphone, being restricted, or a PBX user blocked from dialling the extension assigned to the doorphone? If it is the former, then there may be an internal dialplan, in the doorphone device/ATA. If it is the later, then I have to ask if people need to all the doorphone at all? Most doorphones are one way. If there is no need to call at all, then set the device to not register, but allow calls when not registered. It would still be able to place calls, but not accept them.

 

[cobaltit]

It's pretty clear it's someone at the doorphone as they want to let themselves in. However I'm not seeing where 3CX is involved.

 

[strelok89]

I want to have a list of numbers
Let's say
1
2
3
4
5

3cx would drop all calls but the list
So If my number is
4
And I dailing the door phone the call goes to doorphone.
If my number is 9 my call will be dropped without reaching the doorphone

I talking about external calls and only inbound calls.
All outbound calls allowed, all internal calls allowed.

I think I just need to make CID rule per every allowed number and not make other inbound rules but it's really cluttered solution, and I makes me to have standalone instance of 3cx for the doorphone

 

[strelok89]

On asterisk I just putting did for the doorphone, default destination of the did is hang-up.
And I doind caller routes per every allowed inbound number.
If number 1 to extension 700
If number 2 to extension 700
So if number 7 dails, asterisk drops the call, if number 1 dails he forwarded to extension 700 which is the doorphone

 

[leejor]

Is this simply about restricting internal calls, and DID numbers? An external caller cannot reach an internal extension by DID, if there is no DID rule in place. The only other method would be for an external caller to go through an IVR and attempt to dial the extension directly. This is one thread in how to deal with blocking certain extension numbers coming through an IVR (Digital Receptionist)

The door phones I'm, familiar with , require that the call initiate with the "visitor" at the door. A call (be it a code, or hotline) is placed to an extension, the called party verifies the visitor then press a DTMF button to unlatch the door. Call drops.

Having a door phone that accepts incoming calls, and allows anyone dialling the door phone number, to unlatch the door, seems like a major security issue, and I'd think (hope), that the door phone itself is designed to either prevent this, or has an option to prevent this.

If I'm not understanding your problem, please provide some call scenarios.

 

[strelok89]

Exactly the problem the doorphone has to accept incoming calls and you can press dtmf to unlock. So for now the security measures comes from asterisk pbx where I have block all incoming calls but certain allowed numbers list.
Without ivr.
Just simple list of allowed numbers.
That's the security measure, if I can't make this list everyone couldn unlock the door and this is major security problem

 

[cobaltit]

It's pretty trivial to spoof numbers so I really wouldn't call this secure. I haven't tested it but setting the default trunk route to end call and then having CID rules routing to the door phone might do the trick. Otherwise you are looking at a Call Flow app.

 

[strelok89]

It's pretty trivial to spoof numbers so I really wouldn't call this secure. I haven't tested it but setting the default trunk route to end call and then having CID rules routing to the door phone might do the trick. Otherwise you are looking at a Call Flow app.

Exactly what I did but this forces me to have 3cx instance only for doorphone. No other way?

Becouse if I do the CID route to doorphone and I have ivr also this CID will always only reach the doorphone

 

[cobaltit]

Good thing you can use the free license for this and put it on a Raspberry Pi. The other way is what I mentioned, a call flow app