Buch1 > Using the Configuration Manager > Administration > Liste des adresses IP bloquées et autorisées > Settings of the IP Block- and Allowlist > IP Block- and Allowlist
IP Block- and Allowlist
Proceed as follows:
•Using the Configuration Manager (page (Seite Administration > Liste des adresses IP bloquées et autorisées)
Activer la liste des adresses IP bloquées
If traffic from a particular IP address is evaluated as being too high - and therefore probably malicious- this IP address is blocked. This means that accesses from this IP address to the PBX are initially prevented for one minute (single block by block time). The administrator is informed about the block (Surveillance > Status report). During the block time the PBX continues to monitor the traffic from this IP address. If the traffic from this IP address to the PBX continues to be too high, the single block time is extended (block time restarts).
If the number of attacks from IP addresses over the Internet exceeds a threshold, all traffic outside of the local network is blocked (global block). The local network is the network configured for the CPU (Administration > Configuration IP under Configuration Ethernet).
The administrator must then put in place appropriate measures to protect the PBX within its infrastructure (e.g. using routers or bridges).
*Note: The global block deletes all further entries (single blocks) from the blocklist.
*Note: When you open the page it first shows the status, which is automatically updated every 30 seconds.
*Important: All the entries in the blocklists are deleted when you reboot the PBX.
Network-based access attempts, such as the number of data packets per second or SIP authentication failures are monitored and evaluated.
Nouveau
Adresse IP
Enter a new IP address in the entry fields.
IPv4 address
Four blocks separated by a dot (.).
Adresse IPv6
Eight blocks separated by a colon (:).
Masque de sous-réseau
Masque de sous-réseau
Four blocks separated by a dot (.).
Indicatif régional
Digits 1 to 128.
*Note: The subnet mask is entered automatically for a network computer when you click Calculateur du réseau. You can then also set the Suffixe CIDR and so the Notation CIDR.
The values for Host IP appear automatically in the list.
Transfer to allowlist
Configured locks can be transferred into the allowlist.
Select the blocklist entry Transférer
Supprimer
The administrator can view automatically configured restrictions, and if necessary cancel them, in the IP blocklists.
The marked entry will be deleted.