white_list.rst

How to configure ospatrol to never block some IPs in the active response

OSPatrol by default white lists localhost and your name servers. To add more IPs to the white list, so they will never be blocked, just add a new white_list entry inside the global section.

White list an IP and a network

In this example, the 10.1.0.0/16 network and IP 1.2.3.4 will not be blocked:

CIDR addresses can also be used to white list whole networks:

For DNS servers

For some DNS servers it might be a good idea to ignore all the DNS root servers, so they are never blocked: