Configuring the STARFACE Whitelist and Blacklist

This tab is used to view and configure the whitelist and blacklist of the STARFACE.

Automated adding to blacklist and whitelist: If this checkbox is activated, IP addresses are automatically blacklisted, e.g. if too many SIP registration attempts with incorrect access data reach STARFACE. This prevents brute force attacks. All data packets of an IP address on the blacklist are completely ignored by STARFACE.

The period of validity of an automatic entry in the blacklist depends on the respective reason or type of attack detected.

By the same automatism, the IP addresses from which valid registration attempts are made are included in the whitelist. This means that IP addresses are excluded from verification for 24 hours. The validity period of the list entries of 24 hours starts again with each further successful registration.

E-mail notification for each new entry in blacklist: If this checkbox is activated, all users with a corresponding permission are informed of a new automatic blacklist entry. During this process, the notification e-mail is sent to the e-mail address entered for the respective user.

In order to edit an entry in the whitelist or blacklist, the corresponding line can be selected with a double click or via the configuration icon.

Here you can document the reason for the entry in more detail and also determine how long the entry is valid via the drop-down menu.