118 Chapter 7 Security recommendationsCreating and customizing AMIS Open Networking RPLsIf the CallPilot system has AMIS Open Networking installed, mailboxowners can compose and send messages to mailboxes on other messagingsystems on the open (public) network. This openness allows hackersestablished on your messaging systems to charge their costs to your system.To prevent unwanted charges without unnecessary restrictionof legitimate chargeable calls:• Use CallPilot Manager Advanced Search to list the mailbox classes toallow mailbox class owners to send messages over the public network.• Determine which mailbox classes, if any, should permit mailbox ownersto send messages to an international long distance number, with nospecial restriction. Ensure that the long distance 2 RPL is customizedappropriately.• Of the remaining mailbox classes, determine which should permitmailbox owners to send messages to a domestic long distance number,with no special restriction. Ensure that the long distance 1 RPL iscustomized appropriately.• Of the remaining mailbox classes, determine which should permitmailbox owners to send messages to a local off-switch number,with no special restriction. Ensure that the local RPL is customizedappropriately.• If there are any mailbox classes left, determine if there are any whichshould permit mailbox class members to send messages to an off-switchnumber of any kind.— If so, list each special restrictions required and create one or moreRPLs that block only the restricted calls.Customizing RPLsCustomizing RPLs allows you to secure the system while thru-dial featuresare used. You can restrict calls by international code, area code, or localexchange code by overlapping restriction and permission codes in thesame RPL.ATTENTIONWhen you modify an RPL, the modifications automatically apply to all featuresto which the RPL is assigned.Example of overlapping restriction and permission codes in anRPLA long distance RPL must• prevent mailbox owners from dialing out to a 900 area codeNortel CallPilotAdministrator GuideNN44200-601 01.11 Standard5.0 9 November 2007Copyright © 2007, Nortel Networks.
