I get an incomming call which asterisk sends to an ATA. ATA responds with “302 Moved Temporarily”. And then asterisk tries to make an overseas call. This is what I see on console.
– Got SIP response 302 “Moved Temporarily” back from 22.214.171.124
– Now forwarding SIP/126.96.36.199-adb0c890 to ‘Local/002209162112@voipprovider’ (thanks to SIP/950000000-aea36918)
– Executing [002209162112@voipprovider:1] Hangup(“Local/002209162112@voipprovider-71a8;2”, “”) in new stack
From what I can tell, if this particular extension would have overseas calls enabled in its dialplan, the call would succeed. How can I prevent this type of attacks?