// APPLE PRIVATE RELAY / NFTABLES
Apple Private Relay · nftables
nftables ruleset for Apple Private Relay CIDRs. 286,965 CIDRs, refreshed daily.
// nftables_apple_private_relay_allow.conf
# Apple_private_relay IP Ranges
# Updated: 2026-07-06 03:19:09
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for apple_private_relay
table inet filter_apple_private_relay_allow {
chain input {
type filter hook input priority 0; policy drop;
ip saddr 104.28.28.0/26 accept
ip saddr 104.28.28.64/29 accept
ip saddr 104.28.28.72/30 accept
ip saddr 104.28.28.76/32 accept
ip saddr 104.28.28.79/32 accept
ip saddr 104.28.28.80/32 accept
ip saddr 104.28.28.83/32 accept
ip saddr 104.28.28.84/30 accept
ip saddr 104.28.28.88/32 accept
ip saddr 104.28.28.91/32 accept
ip saddr 104.28.28.92/32 accept
ip saddr 104.28.28.95/32 accept
ip saddr 104.28.28.96/30 accept
ip saddr 104.28.28.100/32 accept
… (13573 more lines)// nftables_apple_private_relay_deny.conf
# Apple_private_relay IP Ranges
# Updated: 2026-07-06 03:19:13
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for apple_private_relay
table inet filter_apple_private_relay_deny {
chain input {
type filter hook input priority 0; policy accept;
ip saddr 104.28.28.0/26 drop
ip saddr 104.28.28.64/29 drop
ip saddr 104.28.28.72/30 drop
ip saddr 104.28.28.76/32 drop
ip saddr 104.28.28.79/32 drop
ip saddr 104.28.28.80/32 drop
ip saddr 104.28.28.83/32 drop
ip saddr 104.28.28.84/30 drop
ip saddr 104.28.28.88/32 drop
ip saddr 104.28.28.91/32 drop
ip saddr 104.28.28.92/32 drop
ip saddr 104.28.28.95/32 drop
ip saddr 104.28.28.96/30 drop
ip saddr 104.28.28.100/32 drop
… (13573 more lines)