// HETZNER / NFTABLES

Hetzner · nftables

nftables ruleset for Hetzner CIDRs. 686 CIDRs, refreshed daily.

// nftables_hetzner_allow.conf

DOWNLOAD ↓ ·

# Hetzner IP Ranges
# Updated: 2026-06-14 03:22:28
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for hetzner

table inet filter_hetzner_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 5.9.0.0/16 accept
    ip saddr 5.75.128.0/17 accept
    ip saddr 5.78.0.0/16 accept
    ip saddr 5.78.8.0/21 accept
    ip saddr 5.78.16.0/24 accept
    ip saddr 5.78.17.0/24 accept
    ip saddr 5.78.18.0/24 accept
    ip saddr 5.78.19.0/24 accept
    ip saddr 5.78.20.0/24 accept
    ip saddr 5.78.21.0/24 accept
    ip saddr 5.78.22.0/24 accept
    ip saddr 5.78.23.0/24 accept
    ip saddr 5.78.24.0/24 accept
    ip saddr 5.78.25.0/24 accept
… (674 more lines)

// nftables_hetzner_deny.conf

DOWNLOAD ↓ ·

# Hetzner IP Ranges
# Updated: 2026-06-14 03:22:28
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for hetzner

table inet filter_hetzner_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 5.9.0.0/16 drop
    ip saddr 5.75.128.0/17 drop
    ip saddr 5.78.0.0/16 drop
    ip saddr 5.78.8.0/21 drop
    ip saddr 5.78.16.0/24 drop
    ip saddr 5.78.17.0/24 drop
    ip saddr 5.78.18.0/24 drop
    ip saddr 5.78.19.0/24 drop
    ip saddr 5.78.20.0/24 drop
    ip saddr 5.78.21.0/24 drop
    ip saddr 5.78.22.0/24 drop
    ip saddr 5.78.23.0/24 drop
    ip saddr 5.78.24.0/24 drop
    ip saddr 5.78.25.0/24 drop
… (674 more lines)