[asterisk-users] Important security alert: update your dialplans now!

[Lenz Emilitri]

Yes but in any case you can enter all of the strings that reasonably match -
even if you have variable-length numbers, you will be able to determine that
a valid number be between 5 and 15 characters - or likely 2 to 20, all
numbers. A number of 156 characters is very likely to be a problem.

BTW, you could add a catchall "mail the sysadmin" option - so when you get a
number that is not being matched you could be notified and adjust the
dialplan as needed.
l.



2010/2/15 Olle E. Johansson <oej at edvina.net>

>
> > To avoid extensive rewriting and fix the current issue.
> That works in countries where you have fixed-length numbers. Unfortunately,
> not every dialplan works that way, so that can't be a generic advice even
> though it may solve your problems.
>
> Thanks for your suggestion!
>
> /O
>
>
-- 
Loway - home of QueueMetrics - http://queuemetrics.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100215/68b8cb42/attachment.htm