// HETZNER / NFTABLES

Hetzner · nftables

nftables ruleset for Hetzner CIDRs. 689 CIDRs, refreshed daily.

// nftables_hetzner_allow.conf

DOWNLOAD ↓ ·

# Hetzner IP Ranges
# Updated: 2026-06-25 03:23:34
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for hetzner

table inet filter_hetzner_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 2.28.0.0/15 accept
    ip saddr 5.9.0.0/16 accept
    ip saddr 5.75.128.0/17 accept
    ip saddr 5.78.0.0/16 accept
    ip saddr 5.161.0.0/16 accept
    ip saddr 23.88.0.0/17 accept
    ip saddr 31.58.88.0/24 accept
    ip saddr 37.27.0.0/16 accept
    ip saddr 45.15.99.0/24 accept
    ip saddr 45.145.227.0/24 accept
    ip saddr 46.4.0.0/16 accept
    ip saddr 46.62.128.0/17 accept
    ip saddr 46.224.0.0/15 accept
    ip saddr 49.12.0.0/15 accept
… (76 more lines)

// nftables_hetzner_deny.conf

DOWNLOAD ↓ ·

# Hetzner IP Ranges
# Updated: 2026-06-25 03:23:34
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for hetzner

table inet filter_hetzner_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 2.28.0.0/15 drop
    ip saddr 5.9.0.0/16 drop
    ip saddr 5.75.128.0/17 drop
    ip saddr 5.78.0.0/16 drop
    ip saddr 5.161.0.0/16 drop
    ip saddr 23.88.0.0/17 drop
    ip saddr 31.58.88.0/24 drop
    ip saddr 37.27.0.0/16 drop
    ip saddr 45.15.99.0/24 drop
    ip saddr 45.145.227.0/24 drop
    ip saddr 46.4.0.0/16 drop
    ip saddr 46.62.128.0/17 drop
    ip saddr 46.224.0.0/15 drop
    ip saddr 49.12.0.0/15 drop
… (76 more lines)