Help with blocking ext to ext calling

[threeeye]

Hi guys,
I know this topic has a lot of threads, but I can’t find the one I need…
All (or most) of them are to block an ext or range to call another ext or range with no exceptions.
Like this 1 - https://community.freepbx.org/t/restrict-internal-extension-calls/39490
And this - https://community.freepbx.org/t/block-extensions-from-dialing-certian-extensions/51649
I need to block ext 2033 from all internal, except from a few (2030,2035,2040,2000,2078 - this is to show that the ext are not in order)
And block 2040 from all except from a different few…

Thanks for any advice I can get…

[sorvani (Jared Busch)]

A custom context like this one.

E911 as it relates to lobby phones

I like the custom context method for restricting lobby phones. [from-house-phone] ; Assuming the allowed to call extension range is 1200 - 1299 ; Adjust as needed, remove the _ if you set to a specific extension i.e. 1234 exten => _12XX,1,Goto(from-internal,${EXTEN},1) exten => 911,1,Goto(from-internal,${EXTEN},1) exten => _[*0-9]!,1,Playback(ss-noservice) exten => h,1,Hangup() Then in the extension advanced settings, change the context to from-house-phone or whatever you named it. [image]

[threeeye]

Let me test my understanding here…
I add in the custom context:
2030 exten => 2033,1,Goto(from-internal,${EXTEN},1)
2035 exten => 2033,1,Goto(from-internal,${EXTEN},1)
_2XXX exten => 2033,1,Hangup()

Is this correct?

[arielgrin]

This looks a lot like multi-tenant. If it is, then be aware that asterisk is probably not your best choice. If it is not, then disregard my comment.

[threeeye]

@arielgrin, no it is not a multi-tenant.
It’s a school…
The principals don’t want peoples to call them directly, but to go through the secretary…

[sorvani (Jared Busch)]

There are many reasons for this need. Specifically house phones. As in the thread I linked.

[sorvani (Jared Busch)]

Then, you don’t tell anyone the principal’s extension.

Just give the secretary a BLF to transfer to.

Make his number a ring group. Then anyone who tries to call him actually gets that.

Make his outbound, internal, caller ID show the ring group extension.

Or, enable follow me with a zero ring time. And the secretary as the members. And give him a second extension also registered to his phone that the secretary can transfer to.

Lots of options.

[threeeye]

@sorvani, I thought about some of what you mentioned…

@sorvani

Just give the secretary a BLF to transfer to.

She has, but when she transfers a call to him, the caller sees him ext num…

@sorvani

Make his number a ring group. Then anyone who tries to call him actually gets that.
Make his outbound, internal, caller ID show the ring group extension.

I’ll see if that works…
But to have about 7-10 ring groups is a lot to configure…

@sorvani

Or, enable follow me with a zero ring time. And the secretary as the members. And give him a second extension also registered to his phone that the secretary can transfer to.

Same as the BLF answer…

I need a way to do this without ring groups, follow me or “hidden” extensions…
I just want to block all internal calls (except from specific extensions) to reach some extensions…

[cynjut (Dave Burgess)]

It might be the fever or the Taco Bell, but I just had an idea on this.

Instead of handling it at the source end, change the extension behavior at the principal’s office end.

Use a custom context that includes his phone number as the destination, but redirect all calls away from his phone unless they are coming from a specific (set of) phone(s). This way, you don’t control the ‘outbound’, you control who can dial direct and who has to go through one of the ‘dial direct enabled’ numbers.

Remember, I might be completely out of here on this, but think about it and see if that might help.

[threeeye]

I don’t know what Taco Bell has to do with anything…
But you might be up to something here…

@cynjut

change the extension behavior at the principal’s office end

The problem is, I don’t know how to do that…

[threeeye]

OK, this is what I got so far…
In extensions_custom.conf:

[from-internal-custom]
exten => 2033,1,Dial(SIP/2030)

This forwards all calls coming into 2033 to 2030
This works, but how do I allow lets say 2035 to call 2033?

[cynjut (Dave Burgess)]

@threeeye

[from-internal-custom]
exten => 2033,1,Dial(SIP/2030)

Use an If to check the CID Number. Jump to “(from-internal,s,1)” if the number matches otherwise, call through to the Dial() command.

[threeeye]

@cynjut

Use an If to check the CID Number. Jump to “(from-internal,s,1)” if the number matches otherwise, call through to the Dial() command.

Here is what I have so far:

[from-internal-custom]
; Forward all calls from 2033 to 2030 except allowed extensions
exten => 2033,1,GotoIf($[“${CALLERID(num)}” = “2035”]?dial1)
exten => 2033,n,GotoIf($[“${CALLERID(num)}” = “2030”]?dial1)
exten => 2033,n,GotoIf($[“${CALLERID(num)}” = “2040”]?dial1)
exten => 2033,n,GotoIf($[“${CALLERID(num)}” = “2021”]?dial1)
exten => 2033,n,GotoIf($[“${CALLERID(num)}” != “7070”]?dial2)

exten => 2033,n(dial1),Dial(SIP/2033)
exten => 2033,n,Hangup()

exten => 2033,n(dial2),Dial(SIP/2030)
exten => 2033,n,Hangup()

It works perfectly except when 2030 transfers (blind transfer) to 2033, the call goes back to 2030, but regular transfer works…