Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Smart Web Security
  • Getting started
    • All guides
    • Address lists
      • Rule for captcha
      • Rule for blocking black addresses
    • Viewing operations
    • Configuring monitoring
    • Setting up alerts
    • Configuring logs via Smart Web Security
    • Configuring logs via Application Load Balancer
    • Migrating to WAF with support for Yandex rules
    • Overview
    • Security profiles
    • WAF
    • ARL (request limit)
    • Rules
    • Conditions
    • Lists
    • Protecting domains
    • Logging
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes

In this article:

  • Set up a rule for blocking black addresses
  • See also
  1. Step-by-step guides
  2. Required and recommended rules
  3. Rule for blocking black addresses

Rule for blocking black addresses

Written by
Yandex Cloud
Updated at August 26, 2025
  • Set up a rule for blocking black addresses
    • See also

Note

The IP lists feature is at the Preview stage.

Smart Web Security has pre-installed lists of untrusted (black) IP addresses. These lists streamline traffic checking and block requests from unsafe or suspicious addresses. Also, you can add custom blacklists.

Set up a rule for blocking black addressesSet up a rule for blocking black addresses

Management console
  1. In the left-hand panel, click Security profiles and select the profile.

  2. Click Add rule.

  3. Enter a name for the rule, e.g., block-by-list.

  4. Set a higher Priority than that of the Smart Protection rules, e.g., 9100.

  5. Enable Only logging.

  6. Specify the rule settings:

    • Type: Base.
    • Action: Deny or Show CAPTCHA.
    • Traffic: On condition.
    • Conditions: IP.
    • Conditions for IP: IP belongs to the list.
    • IP belongs to the list: Add pre-installed lists for filtering or your own blacklists. Requests from these addresses will be blocked.

    Tip

    We recommend that you immediately add these pre-installed blacklists: is_ddoser, is_tor, and is_anonimous.

  7. Click Add.

See alsoSee also

  • Managing IP lists
  • Creating a security profile
  • Adding a rule to a security profile

Was the article helpful?

Previous
Rule for captcha
Next
Viewing operations
© 2025 Direct Cursus Technology L.L.C.