IP blacklist: Difference between revisions
Jump to navigation
Jump to search
imported>David MacQuigg (Add links, discussion of honeypots) |
mNo edit summary |
||
(One intermediate revision by one other user not shown) | |||
Line 1: | Line 1: | ||
{{subpages}} | {{subpages}} | ||
An '''IP blacklist''' is a database or list of [[IP address|IP addresses]] that should be blocked from connecting to a protected system. These blacklists (aka blocklists, blackhole lists, or DNSBL's) are most commonly used by email receivers to screen out spam and other abusive emails flooding the Internet. | An '''IP blacklist''' is a database or list of [[IP address|IP addresses]] that should be blocked from connecting to a protected system. These blacklists (aka blocklists, blackhole lists, or DNSBL's<ref>DNSBL is an acronym meaning a BlackList that is published in DNS, the [[Domain Name System]].</ref>) are most commonly used by email receivers to screen out spam and other abusive emails flooding the Internet. | ||
The best IP blacklists use "honeypots" to detect new sources of abuse, and publish the source address within hours. Honeypots have addresses that are never used in a legitimate email, but are posted on various websites and other locations where criminals typically "harvest" addresses. IP blacklists are most useful in efficiently blocking high-volume and persistent sources. | |||
=== | === Notes === | ||
[ | {{reflist}}[[Category:Suggestion Bot Tag]] | ||
Latest revision as of 16:01, 30 August 2024
An IP blacklist is a database or list of IP addresses that should be blocked from connecting to a protected system. These blacklists (aka blocklists, blackhole lists, or DNSBL's[1]) are most commonly used by email receivers to screen out spam and other abusive emails flooding the Internet.
The best IP blacklists use "honeypots" to detect new sources of abuse, and publish the source address within hours. Honeypots have addresses that are never used in a legitimate email, but are posted on various websites and other locations where criminals typically "harvest" addresses. IP blacklists are most useful in efficiently blocking high-volume and persistent sources.
Notes
- ↑ DNSBL is an acronym meaning a BlackList that is published in DNS, the Domain Name System.