Lucent Technologies MERLIN LEGEND Release 5.0 System Planning Manual page 275

MERLIN LEGEND Communications System Release 5.0
System Planning 555-650-112
A Customer Support Information
Toll Fraud Prevention
Preventive Measures
Take the following preventive measures to limit the risk of unauthorized transfers
by hackers:
Outward restrict all MERLIN LEGEND Communications System voice mail
port extension numbers. This denies access to facilities (lines/trunks). In
Release 3.1 and later systems, voice mail ports are by default outward
restricted.
As an additional security step, network dialing for all extensions, including
voice mail port extensions, should be processed through ARS using dial
access code
!
Deny access to pooled facility codes by removing pool dial-out codes 70,
890-899, or any others on your system.
Create a Disallowed List or use the pre-prepared Disallowed List number 7
(Release 3.1 and later systems only) to disallow dialing 0, 11, 10, 1700,
1809, 1900, and 976 or 1(wildcard)976. In Release 3.1 and later systems,
Disallowed List number 7 does not include 800 and 1800 and 411 and
1411, but Lucent Technologies recommends that you add them. Assign all
voice mail port extensions to this Disallowed List. Lucent
Technologies recommends assigning Disallowed List number 7. This
is an added layer of security, in case outward restriction is
inadvertently removed. (In Release 3.1 and later systems, voice
messaging ports are assigned by default to Disallowed List number 7.)
.
9
SECURITYlALERT:
The MERLIN LEGEND Communications System ships with ARS
activated with all extensions set to Facility Restriction Level 3,
allowing all international calling. To prevent toll fraud, ARS Facility
Restriction Levels (FRLs) should be established using:
FRL 0 for restriction to internal dialing only
FRL 2 for restriction to local network calling only
FRL 3 for restriction to domestic ong-distance (excluding
area code 809 for the Dominican Republic as this is part of
the North American Numbering Plan, unless 809 is required)
RL 4 for international calling
In Release 3.1 and later systems, default local and default toll tables
are factory-assigned an FRL of 2. This simplifies the task of
restricting extensions: the FRL for an extension merely needs to be
changed from the default of 3.
Each extension should be assigned the appropriate FRL to match its
calling requirements. All voice mail port extensions not used for
Outcalling should be assigned to FRL 0 (the default setting in
Release 3.1 and later).
1
Issue 1
June 1997
Page A-13