# Creating a Blacklist

After an untrusted source IP address is configured for the Zone in the blacklist, packets from the blacklisted source IP address are directly discarded.

#### Procedure

1. Choose Defense > Policy Settings > Zone.

2. Click of a Zone.

3. On the Blacklist tab page, click . Set IP Address and Subnet mask. Table 1 describes the parameters.

   Table 1 Creating a blacklisted IP address
   Parameter | Description | Value
   --- | --- | ---
   IP Address | IP address added to the blacklist. | Both IPv4 and IPv6 addresses are supported.
   Subnet mask | Subnet mask of the blacklisted IP address. | The value is an integer that ranges from 8 to 32 for IPv4 and from 8 to 128 for IPv6.

4. Click OK. The created blacklisted IP address is displayed in Blacklist.

#### Follow-up Procedure

- In the upper right corner of the page, you can enter an IP address and click for a search. The information about this IP address is displayed in Blacklist.

- You can click in the Operation column to delete a single IP address. To delete blacklisted IP addresses in batches, select the check boxes before the desired IP addresses and click or directly click , depending on your requirements.

Parent topic: Configuring the Zone-based Defense Policy

Copyright © Huawei Technologies Co., Ltd.