Under attack ?

[Gianni_en]

Receiving every few minutes an email with some IP added to blacklist:

any clue ?

 

[Alphabetic]

https://www.3cx.com/blog/voip-howto/global-ip-blacklist/

"Any 3CX administrator who has email alerts enabled for "An IP has been blacklisted" will know that if the global blacklist is disabled, those email alerts will become unmanageable because of the high volume of events."

anything that is on the internet is subject to attack. How far you go with your network security is on you.

 

[ChrisC_3CX]

I just want to add that if you do not have "Automatic Global 3CX IP Blacklist" enabled I'd highly recommend enabling it as it will automatically give your PBX access to a list of IPs known for malicious behavior and hence not have to wait for your PBX to be "attacked" to block it. Also, as @kieferschild mentioned you will also not receive emails for IPs already in the global blacklist.

 

[Anaphylaxis]

Whilst the 3CX global blacklist is nice it would be nice to have custom black/whitelist entries that sync across all pbx instances

 

[ChrisC_3CX]

Whilst the 3CX global blacklist is nice it would be nice to have custom black/whitelist entries that sync across all pbx instances

Might not be an automated process per se but I guess you could always use the export/import features for this:

 

[Anaphylaxis]

Might not be an automated process per se but I guess you could always use the export/import features for this:

View attachment 28428

I hope we get access to these via the up coming REST API!