Add IP to ruleset
POST/v1/edl/ip-rulesets/:ruleset_id/rules
Add a single IP address or CIDR block to the ruleset with smart conflict resolution.
Conflict Resolution Modes:
extend
: Keep the longer expiration date (default)override
: Replace existing rule completelyskip
: Keep existing rule unchangedfail
: Return error if IP already exists
Use cases:
- Block a newly identified threat IP
- Add IP from threat intelligence feed
- Extend expiration of existing block
Required Permission: read_write
Required Plan: Active EDL Management plan
Request
Responses
- 200
- 201
- 400
- 401
- 403
- 404
- 409
OK
Created
Bad Request
Unauthorized
Forbidden
Not Found
Conflict