116 Chapter 7 Security recommendationsPermission codesA permission code is an exception to the corresponding restriction code.For example, if 21 is a restriction code in the local RPL, and a number thatbegins with 21 (such as 213-3333) is dialed, the call is blocked. However, ifthe Local RPL also includes the permission code 213, a call to 213-3333is permitted.Required RPL maintenance tasksAfter a CallPilot system is installed, you must• Customize the on switch RPL.• Customize the local RPL.• Customize the long distance 1 RPL to permit domestic long distancecalls.• Customize the long distance 2 RPL to permit international long distancecalls.• Define the global restrictions and permissions for off-switch dialing.• Apply RPLs to thru-dial features used by mailbox class members.• Apply a callback handling RPL to any custom applications.Creating and deleting RPLsThere are four supplied RPLs on newly installed systems. Initially, therestriction codes for these lists are digits 0–9 so that no off-switch dialingis permitted. For some organizations, these four lists are sufficient.Organizations that have more complex requirements need special-purposeRPLs. CallPilot can store up to 200 RPLs. Whenever an RPL that youcreate becomes obsolete, delete it.Note: You cannot delete a supplied RPL.Getting there: Messaging → Restriction Permission ListsCreating and customizing RPLs that govern external Call SenderIf a mailbox is compromised, a hacker can listen to messages and use theCall Sender feature to place a call to the message sender.To prevent unwanted charges without unnecessary restrictionof legitimate chargeable calls:• Use CallPilot Manager Advanced Search to list the mailbox classes thatallow external Call Sender.• Determine which mailbox classes should permit mailbox owners to placeinternational long distance calls with no special restriction. Ensure thatthe long distance 2 RPL is customized appropriately.Nortel CallPilotAdministrator GuideNN44200-601 01.11 Standard5.0 9 November 2007Copyright © 2007, Nortel Networks.
