Whitelist/Blacklist

ClearIP’s Whitelist/Blacklist features allow you to configure rules to determine what calls should be blacklisted, whitelisted and whether fraud analysis should be performed on certain calls.

Types of Whitelists/Blacklists

ClearIP offers flexible whitelists/blacklists that can be configured to take action for specific calls based on the phone number, number range, SPID, location, country, source IP address, or reported user agent. Rules can be further restricted to allow exceptions for specific subscribers, or Service providers, Groups, and Users.

The Whitelist/Blacklist menu offers many options to configure blacklist rules. Within each page, you can configure specific rules. ClearIP will check through each Whitelist/Blacklist page in the order listed in the menu from top to bottom to determine priority. For example, rules within the Called Numbers page will take priority over rules within the Called Countries page.

The pages in the Whitelist/Blacklist menu generally fall into 3 categories:

  • Custom Whitelist/Blacklist Rules managed by the user
  • Whitelist/Blacklist Rules that apply only to forwarded calls
  • Shield blacklist managed by TransNexus

Custom Whitelist/Blacklist

ClearIP allows granular control of whitelists/blacklists that can be used to take action for specific calls based on the reported IP address, calling number, called number, calling country, called country, and reported user agent. Each custom whitelist/blacklist page is available under the Whitelist/Blacklist menu.

Forwarded Calls Whitelist/Blacklist

ClearIP follows separate whitelist/blacklist policies for calls that have been forwarded. Calls must have a Diversion header to be considered as Forwarded by ClearIP. The forwarded calls whitelist/blacklist takes precedence over all other whitelist/blacklist pages.

Shield Blacklist

The Shield blacklist is maintained by TransNexus and updated hourly. Shield includes ranges of invalid numbers and numbers determined to be high risk. The Inbound Shield Policies and Outbound Shield Policies pages under the Whitelist/Blacklist menu allow for granular control over when a Shield lookup should be performed and what action should be performed for an invalid or high-risk number.

Actions

The action field in the Whitelist/Blacklist pages defines what action should be taken for matching calls. Options include:

  • Whitelist — Calls will be immediately accepted without being processed by Shield lookup, reputation lookup, or fraud control. It is recommended that the whitelist action only be applied to emergency numbers.
  • Bypass Fraud Control — Calls will skip any fraud analysis and continued to be processed by ClearIP. By default, all calls sent to ClearIP will be monitored by ClearIP’s fraud triggers if fraud triggers are enabled. This action allows you to disable fraud analysis for specific calls.
  • Continue — Override an existing whitelist/blacklist record and calls will continue to the next step in the call processing including fraud control if enabled. If the user wants to allow calls, it is recommended to set the action to Continue instead of whitelist if the calling number is not an emergency number.
  • Divert — Calls will be immediately diverted to the diversion device without being processed by Shield lookup, reputation lookup, or fraud control.
  • Blacklist — Calls will be immediately blocked without being processed by Shield lookup, reputation lookup, or fraud control. If a call is blacklisted, no fraud control is performed, so the user is not billed for fraud control for that blacklisted call.

SIP Messages

If any call is blocked by ClearIP blacklists, then ClearIP will return a SIP 603 with a Reason field set to one of the following options:

  • Blacklisted
  • Forwarding Blacklisted
  • High Risk Calling Number
  • High Risk Called Number
  • Invalid Calling Number
  • Invalid Called Number

This shows an example SIP Message for a blacklisted call. SIP Messages Blacklisted

Whitelist/Blacklist Priority

Priority within a single Whitelist/Blacklist page

Within each specific Whitelist/Blacklist page listed above, there may be multiple rules created. ClearIP will select the one best matching rule to apply to the call.

In this example Whitelist/Blacklist Called Countries page, if a subscriber with calling number 404-526-6060 makes an outbound call to Latvia, ClearIP will apply the first rule in this table and allow the call. If a different subscriber tries to place an outbound call to Latvia, then ClearIP will apply the second rule in the table and immediately block the call. The Calling Number field for the second rule is blank which acts as a wildcard entry for that field.

The order in which rules are displayed does not have any impact on the priority of which rules is applied.

Blacklist Priority Single Page

Priority across different Whitelist/Blacklist pages

The Whitelist/Blacklist pages are queried by ClearIP in the order of the menu listing:

  1. Forwarded Called Numbers
  2. Forwarded Called SPIDs
  3. Forwarded Called Locations
  4. IP Addresses
  5. User Agents
  6. Calling Numbers
  7. Called Numbers
  8. Calling SPIDs
  9. Called SPIDs
  10. Calling Locations
  11. Called Locations
  12. Calling Countries
  13. Called Countries
  14. Inbound Shield Policies
  15. Outbound Shield Policies

The first matching rule found by ClearIP through the ordered list of Whitelist/Blacklist pages will be applied by ClearIP. Rules in subsequent pages will be ignored.

For example, we may have want to blacklist calls to Latvia because of high fraud risk, but we may want to allow subscribers to make calls to the U.S. Embassy in Latvia with called number 37167107000. We can add a blacklist rule for Latvia in the Called Countries page. Blacklist Latvia

Then we can add a continue rule for the specific called number 37167107000 within Latvia to the Called Numbers page.

Continue Latvia Number

ClearIP will first check the Called Numbers rules, and see that the call should not be blacklisted and should continue to fraud analysis. ClearIP will then ignore all remaining blacklist rules in the pages following the Called Numbers page.

Priority among other ClearIP services

When ClearIP receives a call, it will check the custom whitelist and blacklist rules, then check the Shield Policies. If the call has not been blocked due to any blacklist rules or Shield policies, then the call will be analyzed by ClearIP’s fraud triggers configured in the Fraud menu. Any calls that are whitelisted or blacklisted will not have any fraud analysis performed on them.

The complete ClearIP call processing diagram is available under the General Setup section.