[asterisk-users] Access PBX from internet - best practice

[jg]

> If remote users *only* need to call contacts *within the office*, then whatever
> other precautions you take, make sure they land in a context which does not
> allow outside calls.
Yes, but this is not sufficient. When transfers are allowed, the outside channel will operate in 
the local context (typically from-internal). You also need to set the transfer options properly, 
or this  could be abused.

jg