The IPDS or Intrusion and Prevention Detection System section within the IPDS module allows the configuration and setting of protection rules at System or Farm service level. IPDS is a module that implements a group of techniques designed to detect, analyze and block network attacks.
RBL or Real-time Blackhole Lists are community-based central repositories for IP Reputation. RBLs are most commonly used to identify spam comments and network attacks. The repository maintains a list of IPs that can be blocked (blacklisted) on servers, thus lowering the probability of an attack on our servers.
This section shows a list of RBL rules.
These are the fields of the list:
Name. A unique descriptive name of the rule.
Only Logging. If activated, the rule has no real effect on traffic, just writes output to syslog.
Farms. List of farms in which the rule is applied.
Status. Shows if the rule is activated or not.
Actions. Allows editing, running/stopping the rule, or deleting it.
The actions menu also allows adding and configuring a new RBL Rule.
Check out the video of RBL.
