Cloudflare · UFW

UFW (Uncomplicated Firewall) shell script for Cloudflare. 22 CIDRs, refreshed daily.

// ufw_cloudflare_allow.sh

DOWNLOAD ↓ ·

#!/bin/bash
# Cloudflare IP Ranges
# Updated: 2026-02-11 15:35:02
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# UFW allow rules for cloudflare

ufw allow from 173.245.48.0/20
ufw allow from 103.21.244.0/22
ufw allow from 103.22.200.0/22
ufw allow from 103.31.4.0/22
ufw allow from 141.101.64.0/18
ufw allow from 108.162.192.0/18
ufw allow from 190.93.240.0/20
ufw allow from 188.114.96.0/20
ufw allow from 197.234.240.0/22
ufw allow from 198.41.128.0/17
ufw allow from 162.158.0.0/15
ufw allow from 104.16.0.0/13
ufw allow from 104.24.0.0/14
ufw allow from 172.64.0.0/13
ufw allow from 131.0.72.0/22
ufw allow from 2400:cb00::/32
… (6 more lines)

// ufw_cloudflare_deny.sh

DOWNLOAD ↓ ·

#!/bin/bash
# Cloudflare IP Ranges
# Updated: 2026-02-11 15:35:02
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 00:00 UTC
# UFW deny rules for cloudflare

ufw deny from 173.245.48.0/20
ufw deny from 103.21.244.0/22
ufw deny from 103.22.200.0/22
ufw deny from 103.31.4.0/22
ufw deny from 141.101.64.0/18
ufw deny from 108.162.192.0/18
ufw deny from 190.93.240.0/20
ufw deny from 188.114.96.0/20
ufw deny from 197.234.240.0/22
ufw deny from 198.41.128.0/17
ufw deny from 162.158.0.0/15
ufw deny from 104.16.0.0/13
ufw deny from 104.24.0.0/14
ufw deny from 172.64.0.0/13
ufw deny from 131.0.72.0/22
ufw deny from 2400:cb00::/32
… (6 more lines)