<extension name="extension_call_permissions" continue="true">
<!--block if caller is 2006 and calls 2000,1,2-->
<condition field="${sip_from_user}" expression="2006"/>
<condition field="destination_number" expression="^200[0-2]$">
<action application="respond" data="403 Called extension forbidden"/>
</condition>
</extension>