Lists

Lists help you create traffic filtering rules based on groups of IP addresses, ASNs, regular expressions, and string values. You can add a list as a condition when creating rules in the security profile, WAF, or ARL. Thus, you can block some traffic, let it through, or direct it to SmartCaptcha at the early stages of request processing.

There are two types of lists:

• Provided by Yandex Cloud.
• Custom.

Yandex Cloud listsYandex Cloud lists

Yandex Cloud lists are preset groups of values selected based on a particular attribute. These lists are regularly updated and provided as a part of the Smart Web Security feature set. Their purpose is to create an individual security strategy and automatically block potentially malicious traffic.

Smart Web Security provides several types of lists: IP addresses, bots, and bot categories.

Description of preset IP address lists:

• is_ddoser: IP addresses used in DDoS attacks. This list is based on data provided by different research organizations and security departments.
• is_hosting: IP addresses of hosting providers.
• is_mobile: IP addresses of mobile providers.
• is_tor: IP addresses of the Tor network used for traffic anonymization.
• is_proxy: IP addresses of public proxy servers. Access via a proxy can be used to hide the real IP address and potentially malicious activities.
• is_vpn: IP addresses of VPN providers. VPN is used for private access and spoofing IP addresses.
• is_ml_vpn: VPN provider IP addresses detected using machine learning algorithms.
• is_anonymous: IP addresses of anonymous networks. People often use such networks to hide their identity.

You cannot change or delete the preset lists.

Custom listsCustom lists

In addition to preset lists, you can create your custom value sets.

We recommend grouping them into one of these categories:

• Blacklist: Values used in attacks against your infrastructure or other undesirable actions, e.g., spamming. You can block queries with such values automatically without applying the Smart Web Security rules to them.

• Whitelist: Values that are trusted within your organization. For example, branch office, partner, or contractor IP addresses. Queries with these values can be let through automatically without additional checks on the Smart Web Security side.

In Smart Web Security, you can create lists manually or upload ready-made txt or csv list files.

Useful linksUseful links

• Managing lists
• Conditions