All voice mails use both A and B channels...not just the Flash
The B channel shall follow the restrictions of the A channel however best to restrict all A channels (port DN's) on the voice mail.
If it's a 4 channel flash then that is 2 DN's that need restricting.

I personally leave lines last but it all depends on the sites dialing habits
-I program a filter only for voice mail with *, 0, 10....this leaves them the option to use Outdial still with a stern warning to use an 8 digit complex password
-Sets I program 411, 976, 900, 700 plus any other restrictions that are ask of such as *, 0, 1, 10 etc
-As for Lines I ask if they ever make over sea's call's and if no then I also restrict *, 0, 10 as well, and if they say the odd time then I create a COS password to override the restriction.

I am thankful that in over 20 years I have never had a callback after locking down a system after a hack, it's almost worrisome when you leave the site because then the onus is on you but sticking to your same setup on each site as best you can helps.

=---()))))))))---=
www.curlycord.com
[Linked Image from telcopc.ca]
Toronto, Canada