// AZURE / NFTABLES

Azure · nftables

nftables ruleset for Azure CIDRs. 95,335 CIDRs, refreshed daily.

// nftables_azure_allow.conf

DOWNLOAD ↓ ·

# Azure IP Ranges
# Updated: 2026-08-26 02:36:13
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for azure

table inet filter_azure_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 4.144.0.0/12 accept
    ip saddr 4.160.0.0/11 accept
    ip saddr 4.192.0.0/10 accept
    ip saddr 9.129.0.0/16 accept
    ip saddr 9.141.0.0/16 accept
    ip saddr 9.160.0.0/16 accept
    ip saddr 9.163.0.0/16 accept
    ip saddr 9.169.0.0/16 accept
    ip saddr 9.205.0.0/16 accept
    ip saddr 9.223.0.0/16 accept
    ip saddr 9.234.0.0/15 accept
    ip saddr 13.64.0.0/13 accept
    ip saddr 13.72.64.0/18 accept
    ip saddr 13.72.192.0/18 accept
… (2136 more lines)

// nftables_azure_deny.conf

DOWNLOAD ↓ ·

# Azure IP Ranges
# Updated: 2026-08-26 02:36:14
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for azure

table inet filter_azure_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 4.144.0.0/12 drop
    ip saddr 4.160.0.0/11 drop
    ip saddr 4.192.0.0/10 drop
    ip saddr 9.129.0.0/16 drop
    ip saddr 9.141.0.0/16 drop
    ip saddr 9.160.0.0/16 drop
    ip saddr 9.163.0.0/16 drop
    ip saddr 9.169.0.0/16 drop
    ip saddr 9.205.0.0/16 drop
    ip saddr 9.223.0.0/16 drop
    ip saddr 9.234.0.0/15 drop
    ip saddr 13.64.0.0/13 drop
    ip saddr 13.72.64.0/18 drop
    ip saddr 13.72.192.0/18 drop
… (2136 more lines)