← Waf / waf / tools / lists

Use lists in expressions

In the Cloudflare dashboard, there are two options for editing expressions:

Expression Builder: Allows you to create expressions using drop-down lists, emphasizing a visual approach to defining an expression.
Expression Editor: A text-only interface that supports advanced features, such as grouping symbols and functions for transforming and validating values.

Use a list in the Expression Builder

To use a list in the Expression Builder:

From the Operator drop-down list, select is in list or is not in list. Note that not all fields support these operators.
Select a list from the Value drop-down list. Depending on your plan, you may be able to select a Managed IP List.
To commit your changes and enable the rule, select Deploy. If you are not ready to enable the rule, select Save as Draft.

To use a list in the Expression Editor, specify the in operator and use $<list_name> to specify the name of the list.

Examples:

Expression matching requests from IP addresses that are in an IP list named office_network:
```
ip.src in $office_network
```
Expression matching requests with a source IP address different from IP addresses in the office_network IP list:
```
not ip.src in $office_network
```
Expression matching requests from IP addresses in the Cloudflare Open Proxies Managed IP List:
```
ip.src in $cf.open_proxies
```