![[]](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg){kind=link}
- Overview
- Get started
- Concepts
- Traffic detections
- Overview
- Attack score
- Malicious uploads
- Bot score
- Threat intelligence
- Custom rules
- Overview
- Create in the dashboard
- Create via API
- Create using Terraform
- Configure a rule with the Skip action
- Common use cases
- Allow traffic from IP addresses in allowlist only
- Allow traffic from search engine bots
- Allow traffic from specific countries only
- Block Microsoft Exchange Autodiscover requests
- Block requests by attack score
- Block traffic by geographical location
- Block traffic from specific countries
- Build a sequence rule within custom rules
- Challenge bad bots
- Configure token authentication
- Exempt partners from Hotlink Protection
- Issue challenge for admin user in JWT claim based on attack score
- Require a specific cookie
- Require known IP addresses in site admin area
- Require specific HTTP headers
- Require specific HTTP ports
- Stop R-U-Dead-Yet? (R.U.D.Y.) attacks
- Update custom rules for customers or partners
- Custom rulesets
- Managed rules
- Overview
- Deploy in the dashboard
- Deploy via API
- Deploy using Terraform
- Troubleshooting
- Create exceptions
- Log the payload of matched rules
- Additional tools
- Account-level configuration
- Overview
- Custom rulesets
- Rate limiting rulesets
- Analytics
- Security features interoperability
- Reference
- Alerts
- Phases
- Legacy features
- WAF managed rules (previous version)
- Rate Limiting (previous version)
- Firewall rules
- Firewall rules upgrade
- Glossary
Use lists in expressions
In the Cloudflare dashboard, there are two options for editing expressions:
- Expression Builder: Allows you to create expressions using drop-down lists, emphasizing a visual approach to defining an expression.
- Expression Editor: A text-only interface that supports advanced features, such as grouping symbols and functions for transforming and validating values.
To use a list in the Expression Builder:
-
From the Operator drop-down list, select is in list or is not in list. Note that not all fields support these operators.
[Selecting an IP list from the Value drop-down list when configuring the expression of a WAF custom rule] -
Select a list from the Value drop-down list. Depending on your plan, you may be able to select a Managed IP List.
-
To commit your changes and enable the rule, select Deploy. If you are not ready to enable the rule, select Save as Draft.
![[Selecting an IP list from the Value drop-down list when configuring the expression of a WAF custom rule]](https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=979,height=739,format=webp/_astro/cf-open-proxies-list.DYcEfIK7.png){kind=link}
To use a list in the Expression Editor, specify the in operator and use $<list_name> to specify the name of the list.
Examples:
-
Expression matching requests from IP addresses that are in an IP list named
office_network:ip.src in $office_network -
Expression matching requests with a source IP address different from IP addresses in the
office_networkIP list:not ip.src in $office_network -
Expression matching requests from IP addresses in the Cloudflare Open Proxies Managed IP List:
ip.src in $cf.open_proxies
[privacy options]Your privacy choices![[privacy options]](https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=26,height=12,format=svg/_astro/privacyoptions.BWXSiJOZ.svg){kind=link}