Restricting feature codes...and other things with CoS

Soooo, yeah, just found out that users have been abusing *93 and redirecting some rather important calls. Won’t get into the details, but this is a major embarrassment for us. I take the the blame, I setup the system, I falsely assumed such capabilities would be limited by default.

Tell me I’m not the first to be hit by this.

Many users use legitimate feature codes for many things, actually dialing *nn to get things done. I’m guessing feature codes are used behind the scenes as well for hard/soft button assignments as well. I’m hesitant of hastily making changes to block *93 for everyone, or inadvertently disabling access to critical features across the board. This is entirely due to my ignorance of the system, well at least the “nuts and bolts” of it.

Approaches to things of this nature are typically deny everything, allow what is needed. Is this a typical approach on FreePBX? If so, is there a guide for “Be sure to limit these things”? Some sort of best-practices for limiting capabilities?

Back to CoS specifically, I understand how to block a feature code for an extension, but how can I allow something like *93, but control what destinations an extension has based on who initiates it?

Can you PIN protect certain things with CoS? Or is it only allow/deny?

Can notifications be setup as a way of auditing feature code use, or other things shown in, but not limited to, CoS? Or is monitoring log files for “Executing…” the way to do this with something home grown.

Apologies for the slightly ranty post.

Class of Service-Admin Guide - PBX GUI - Documentation (

If you are looking to do more than what is defined in the wiki, it certainly is possible, but for your use case it will likely require a custom dial plan.

Regarding best practices, there are many, but again what you are using the box for really impacts what should be on the list. I wouldn’t consider *93 part of a best practice, but others might. My best recommendation is: “This is an open-source community, look for what you need, and if you don’t find it, create it for the community.”

You can write up a post, for yourself (for the next time) and others that outlines your setup and associated best practices and post it here :slight_smile:

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.