Configuration of the STARFACE whitelist and blacklist

The STARFACE whitelist and blacklist can be viewed and also edited in this tab.

Automated adding to blacklist and whitelist: If this checkbox is activated, IP addresses are automatically added to the blacklist if they have e.g. too many STARFACE SIP registration attempts with incorrect access data. Brute-force attacks should thus be suppressed, because an IP address on the blacklist is completely ignored by STARFACE.

At the same time, the IP addresses from the valid registration attempts are added to the whitelist, whereby they are excluded from the check for 24 hours. The list entries’ validity period restarts with each additional successful registration.

The duration of an IP block depends on the respective reason for the blacklist entry or the type of attack identified:

E-mail notification for each new entry in blacklist: If this checkbox is activated, all users with a corresponding permission are informed of a new automatic blacklist entry. During this process, the notification e-mail is sent to the e-mail address entered for the respective user.

To edit an entry in the whitelist or blacklist, the corresponding rows can be selected by double-clicking on them or by using the  editing icon.

The reason for the entry can be specified in more detail here, and it can also be specified how long the entry is valid for using the drop-down menu.