Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Smart Web Security
  • Getting started
    • All guides
    • Address lists
      • Rule for captcha
      • Rule for blocking black addresses
    • Viewing operations
    • Configuring monitoring
    • Setting up alerts
    • Configuring logs via Smart Web Security
    • Configuring logs via Application Load Balancer
    • Migrating to WAF with support for Yandex rules
    • Overview
    • Security profiles
    • WAF
    • ARL (request limit)
    • Rules
    • Conditions
    • Lists
    • Protecting domains
    • Logging
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  1. Step-by-step guides
  2. Required and recommended rules
  3. Rule for captcha

Rule for Yandex SmartCaptcha

Written by
Yandex Cloud
Updated at December 29, 2025

Set up a rule to redirect requests to SmartCaptcha for verification.

Note

If the Deny action is set for the default basic rule and the requests are sent to SmartCaptcha for verification, add a basic rule that allows requests to the CAPTCHA. The address of the allowed request matches the regular expression: /tmgrdfrend.*. Set the rule to have a higher priority than rules with a CAPTCHA challenge.

Management console
  1. In the management console, select the folder.
  2. In the list of services, select Smart Web Security.
  3. In the left-hand panel, click Security profiles and select the profile.
  4. Click Add rule and in the window that opens:

    1. Enter a name for the rule, e.g., allow-captcha.

    2. Set Priority higher than that of the rules sending requests to captcha checks.

    3. Enable Only logging.

    4. Specify the rule settings:

      • Type: Base.
      • Action: Allow.
      • Traffic: On condition.
      • Conditions: Request URI.
      • Request path: Matches the regular expression.
      • Enter the /tmgrdfrend.* expression.
    5. Click Add.

See alsoSee also

  • Creating a security profile
  • Adding a rule to a security profile

Was the article helpful?

Previous
Address lists
Next
Rule for blocking black addresses
© 2026 Direct Cursus Technology L.L.C.