Rule for blocking black addresses
Written by
Updated at August 26, 2025
Note
The IP lists feature is at the Preview stage.
Smart Web Security has pre-installed lists of untrusted (black) IP addresses. These lists streamline traffic checking and block requests from unsafe or suspicious addresses. Also, you can add custom blacklists.
Set up a rule for blocking black addresses
Management console
-
In the left-hand panel, click
Security profiles and select the profile. -
Click
Add rule. -
Enter a name for the rule, e.g.,
block-by-list. -
Set a higher Priority than that of the Smart Protection rules, e.g.,
9100. -
Enable Only logging.
-
Specify the rule settings:
- Type:
Base. - Action:
DenyorShow CAPTCHA. - Traffic:
On condition. - Conditions:
IP. - Conditions for IP:
IP belongs to the list. - IP belongs to the list: Add pre-installed lists for filtering or your own blacklists. Requests from these addresses will be blocked.
Tip
We recommend that you immediately add these pre-installed blacklists:
is_ddoser,is_tor, andis_anonimous. - Type:
-
Click Add.