Lists and exceptions
AWAF stores rule lists as files under lists/.
IP allow list
lists/whitelist_ip accepts IPv4, IPv6, CIDR networks, and ranges.
5.24.102.211
5.24.102.0/24
5.24.102.0 - 5.24.102.254IP block list
lists/blacklist_ip stores blocked addresses; comments can include RayID and reason.
32.23.104.201 # c5b4c36d24417e72 torURL and User-Agent
Use whitelist_url for REST/API/XML exclusions and whitelist_useragent or captcha_useragent for browser-specific rules.