Skip to content
Start here

Email Security

Email SecuritySettingsBlock Senders

resource cloudflare_email_security_block_sender

required Expand Collapse
account_id: String

Identifier.

is_regex: Bool
pattern: String

The pattern value to match. The format depends on pattern_type: a valid email address for EMAIL (e.g. user@example.com), a valid domain name for DOMAIN (e.g. example.com), or a plain IPv4 address or IPv4 CIDR block for IP (e.g. 1.2.3.4 or 1.2.3.0/24); the API accepts only globally reachable IP addresses and rejects private, loopback, link-local, and unspecified addresses.

pattern_type: String

Type of pattern matching.

  • EMAIL: matches a full email address (e.g. user@example.com)
  • DOMAIN: matches a domain name (e.g. example.com)
  • IP: matches a plain IPv4 address (e.g. 1.2.3.4) or an IPv4 CIDR block (e.g. 1.2.3.0/24). The API accepts only globally reachable addresses.
  • UNKNOWN: deprecated; you cannot use this when creating or updating policies, but it may appear on existing entries.
optional Expand Collapse
comments?: String
computed Expand Collapse
id: String

Blocked sender pattern identifier.

created_at: Time
Deprecatedlast_modified: Time

Use modified_at instead.

Deprecated, use modified_at instead. End of life: November 1, 2026.