IP blacklist

From Citizendium
Jump to navigation Jump to search
This article is a stub and thus not approved.
Main Article
Discussion
Related Articles  [?]
Bibliography  [?]
External Links  [?]
Citable Version  [?]
 
This editable Main Article is under development and subject to a disclaimer.

An IP blacklist is a database or list of IP addresses that should be blocked from connecting to a protected system. These blacklists (aka blocklists, blackhole lists, or DNSBL's[1]) are most commonly used by email receivers to screen out spam and other abusive emails flooding the Internet.

The best IP blacklists use "honeypots" to detect new sources of abuse, and publish the source address within hours. Honeypots have addresses that are never used in a legitimate email, but are posted on various websites and other locations where criminals typically "harvest" addresses. IP blacklists are most useful in efficiently blocking high-volume and persistent sources.

Notes

  1. DNSBL is an acronym meaning a BlackList that is published in DNS, the Domain Name System.