Proceed as follows:

If traffic from a particular IP address is evaluated as being too high - and therefore probably malicious- this IP address is blocked. This means that accesses from this IP address to the PBX are initially prevented for one minute (single block by block time). The administrator is informed about the block (Surveillance > Status report). During the block time the PBX continues to monitor the traffic from this IP address. If the traffic from this IP address to the PBX continues to be too high, the single block time is extended (block time restarts).

If the number of attacks from IP addresses over the Internet exceeds a threshold, all traffic outside of the local network is blocked (global block). The local network is the network configured for the CPU (Administration > Configuration IP under Configuration Ethernet).

The administrator must then put in place appropriate measures to protect the PBX within its infrastructure (e.g. using routers or bridges).

Network-based access attempts, such as the number of data packets per second or SIP authentication failures are monitored and evaluated.

Enter a new IP address in the entry fields.

Four blocks separated by a dot (.).

Eight blocks separated by a colon (:).

Four blocks separated by a dot (.).

Numbers1 à 128.

IP hôte: The values are automatically entered in the list.

Configured locks can be transferred into the allowlist.

Select the blocklist entry Transférer

The administrator can view automatically configured restrictions, and if necessary cancel them, in the IP blocklist.

The selected entry will be deleted.