...
| Web interface of the STARFACE | Menüpunkt Menu "Configuration" | Menüpunkt Menu "Security" | Reiter Tab "Filter" |
|---|---|---|---|
|
|
|
|
...
The STARFACE This tab is used to view and configure the whitelist and blacklist can be viewed and also edited in this tabof the STARFACE.
Automated adding to blacklist and whitelist: If this checkbox is activated, IP addresses are automatically added to the blacklist if they have blacklisted, e.g. if too many STARFACE SIP registration attempts with incorrect access data . Brute-force attacks should thus be suppressed, because reach STARFACE. This prevents brute force attacks. All data packets of an IP address on the blacklist is are completely ignored by STARFACE.
The period of validity of an automatic entry in the blacklist depends on the respective reason or type of attack detected.At the same time
Reason | Duration |
|---|---|
Web interface | 10 minutes |
Telephone menu | 24 hours |
Call | 24 hours |
SIP | 24 hours |
Autoprovisioning | 24 hours |
XMPP | 10 minutes |
UCI | 10 minutes |
By the same automatism, the IP addresses from
...
which valid registration attempts are made are
...
included in the whitelist
...
. This means that IP addresses are excluded from
...
verification for 24 hours. The
...
validity period
...
of the list entries of 24 hours starts again with each
...
further successful registration.
| Hinweis |
|---|
| Note: IP addresses which that are on the whitelist cannot be entered in added to the blacklist , and vice versa. This is neither possible by means of a manual entry, nor by means of the automatic process of STARFACE process. |
The duration of an IP block depends on the respective reason for the blacklist entry or the type of attack identified:
...
Reason
...
Duration
...
Web interface
...
10 minutes
...
Telephone menu
...
24 hours
...
...
24 hours
...
SIP
...
24 hours
...
Autoprovisioning
...
24 hours
...
XMPP
...
10 minutes
...
UCI
...
10 minutes
E-mail notification for each new entry in blacklist: If this checkbox is activated, all users with a corresponding permission are informed of a new automatic blacklist entry. During this process, the notification e-mail is sent to the e-mail address entered for the respective user.
To In order to edit an entry in the whitelist or blacklist, the corresponding rows line can be selected by double-clicking on them or by using the editing with a double click or via the configuration icon.
The Here you can document the reason for the entry can be specified in more detail here, and it can also be specified determine how long the entry is valid for using via the drop-down menu.