Managing lists
Note
The IP lists feature is at the Preview stage.
You can only manage custom lists. Preset Yandex Cloud lists cannot be changed.
Creating a list
-
In the management console
, select the folder. -
Navigate
to Smart Web Security. -
In the left-hand panel, select
Lists and click Create list. -
Select the list type:
-
IP addresses: IP addresses, address ranges, or prefixes in CIDR format. Here are some examples:111.222.33.44 2001:0db8:85a3:0000:0000:8a2e:5678:1234 10.123.1.1/32 10::1234:1abc:1/64 1.2.0.0-1.2.1.1 -
ASN numbers: Autonomous system numbers. Here are some examples:AS64512 AS4294967294 15169 1.10 -
Regular expressions: Regular expressions, e.g., for analyzing theUser-Agentheader or grouping multiple request paths with|. Here are some examples:User-Agent:\s* \\[\'\"\.\;] a{100,} --.* /api/v[12]/users /promo/(sale|discount)/? /assets/.*\.(css|js)Where:
/api/v[12]/users:/api/v1/usersand/api/v2/userspaths./promo/(sale|discount)/?:/promo/saleand/promo/discountpages, with an optional trailing slash./assets/.*\.(css|js): paths to CSS and JS files in the/assets/folder.
You can group multiple alternative options, e.g., request paths, API versions, or header values, in a single regular expression using
|. Special characters must be escaped, e.g., use\.for a dot in a filename.Regular expression lists check for a full-string match. Do not add
^or$anchors. -
String values: Text strings, e.g., IDs or request paths. Here are some examples:fev4ct8l9infabcd1234 id345678 /api/v1/users /promo/sale /assets/logo.svg
To filter by the request path, bind the list to the
Request URIcondition. Provide the paths without the schema, domain, or query parameters.To filter requests to static files on the
static.example.comdomain, attach the list with the/assets/.*\.(css|js)regular expression to theRequest URIcondition. Add a separate condition,Host = static.example.com, and join the two conditions using the logical AND operator. -
-
Enter a name and description for the list.
-
Add a label if needed.
-
Click Create list and then click Add to list.
-
Input the list values manually or upload them from a TXT or CSV file.
Specify each value in a new row in the list or file. You can also add an optional description separated by a comma without a space:
<value_1>,<description_1> <value_2>,<description_2> <value_3> <value_4>The list you upload will replace the previous one.
-
Click Save changes.
Now you will be able to select this list when adding a rule to a security or ARL profile.
Downloading a list
-
In the management console
, select the folder. -
Navigate
to Smart Web Security. -
In the left-hand panel, select
Lists. -
Click the row with the list you need.
-
Navigate to the IP addresses tab.
-
Click
Download list.The list will be saved in CSV format.
Updating list parameters
- In the management console
, select the folder. - Navigate
to Smart Web Security. - In the left-hand panel, select
Lists. - Next to the list, click
and select Rename. - Update the name and/or description for the list, add or delete labels as needed.
- Click Save changes.
Updating a list of values
-
In the management console
, select the folder. -
Navigate
to Smart Web Security. -
In the left-hand panel, select
Lists. -
Click the row with the list you need.
-
Navigate to the IP addresses tab.
-
To update the description for one or more values, select them and click
Change description on the panel below. -
To delete one or more values, select them and click
Delete. -
To edit the list as text or upload a new list file:
- Click
Edit list. - Edit the list or upload a new file.
- Click Save changes.
- Click
-
Deleting a list
- In the management console
, select the folder. - Navigate
to Smart Web Security. - In the left-hand panel, select
Lists. - Next to the list, click
and select Delete.