Reference
Whitelist
Addresses Heimnull never mitigates, or never even detects attacks on, with optional expiry.
Configure → Whitelist (operators and admins) lists addresses and prefixes that are exempt, whatever their traffic.
| Setting | What it does |
|---|---|
| Address or prefix | IPv4 or IPv6 |
| Exempt from | Mitigation (still detected): attacks are detected and notified, never mitigated. Detection: the address isn’t watched at all. Or both |
| Expires | Optional: the entry ends by itself |
| Comment | Why it’s there |
Whitelist your own infrastructure: DNS resolvers, mail servers, your routers’ addresses, monitoring, anything whose loss would hurt more than an attack on it.
- A blackhole is refused if it would cover any whitelisted address, so even an aggregate blackhole for carpet bombing never covers one.
- A mitigation already active when its address is whitelisted is withdrawn within 30 seconds.
- Every refusal is recorded on the mitigation, in the audit log, and as a
mitigation_refusedevent.