# HG changeset patch # User František Kučera # Date 1594068195 -7200 # Node ID 802f32be53bf2e13faf4b26dca28d8ee8f6a343b # Parent 66e05b1bbda289a683631be4538411fb7898f307 data: blacklist, whitelist, greylist diff -r 66e05b1bbda2 -r 802f32be53bf data/dictionary.xml --- a/data/dictionary.xml Wed Jun 24 22:00:50 2020 +0200 +++ b/data/dictionary.xml Mon Jul 06 22:43:15 2020 +0200 @@ -2084,6 +2084,64 @@ computer + + + + + + + + a list of elements that are not allowed or should be excluded; + the element might be e.g. IP address, e-mail address, regular expression, name pattern or name; + example 1: we do not accept e-mail messages from blacklisted IP addresses, because such IP addresses are known to send spam + example 2: blacklisted kernel modules are not loaded during the system start + + + computer + security + + + + + + + + + + a list of elements that are allowed or should be included; + the element might be e.g. IP address, e-mail address, regular expression, name pattern or name; + example 1: connections from whitelisted IP addresses to the service are allowed, while connections from all other IP addresses are rejected; + example 2: connections from whitelisted IP addresses to the service are allowed, connections from blacklisted IP addresses are dropped (the will not get a any response) and connections from all other IP addresses are rejected (will get a negative response); + + + computer + security + + + + + + + + + + + + + a method of preventing e-mail spam; + 1) utilizes standard behavior of legitimate e-mail servers that tries to redeliver the message multiple times when a temporary error occurs + 2) expects that spammers are not going to redeliver in that case, because they are focused more on quantitiy than quality (few lost messages are not an issue for them); + MTA equiped with a greylisting filter will respond with a simulated temporary error to incomming messages from an unknown sender; + when the sender attempts to deliver the massage for the second time, the message will be accepted (if it is long enough after the first attempt); + this method is stateful which means that the MTA server needs to maintain a list of senders and their send attempts – this list is called greylist; + disadvantage of this method is that it causes delays in the e-mail delivery; + this disadvantage can be partially mitigated using a whitelist: trusted senders (domains or IP addresses) are put on the whitelist and do not have to wait even if they are sending the first message + + + computer + messaging + +