// STORMWALL / NFTABLES

stormwall · nftables

nftables ruleset for stormwall CIDRs. 24 CIDRs, refreshed daily.

// nftables_stormwall_allow.conf

DOWNLOAD ↓ ·

# Stormwall IP Ranges
# Updated: 2026-07-12 03:46:25
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for stormwall

table inet filter_stormwall_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 5.252.32.0/22 accept
    ip saddr 103.134.155.0/24 accept
    ip saddr 160.25.253.0/24 accept
    ip saddr 160.79.120.0/23 accept
    ip saddr 160.79.122.0/24 accept
    ip saddr 185.121.240.0/22 accept
    ip saddr 193.84.85.0/24 accept
    ip saddr 193.84.88.0/24 accept
    ip saddr 193.104.120.0/24 accept
    ip6 saddr 2a06:a180:10::/48 accept
    ip6 saddr 2a06:a180:1f::/48 accept
    ip6 saddr 2a06:a180:40::/48 accept
    ip6 saddr 2a06:a180:50::/48 accept
    ip6 saddr 2a06:a180:5f::/48 accept
… (5 more lines)

// nftables_stormwall_deny.conf

DOWNLOAD ↓ ·

# Stormwall IP Ranges
# Updated: 2026-07-12 03:46:25
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for stormwall

table inet filter_stormwall_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 5.252.32.0/22 drop
    ip saddr 103.134.155.0/24 drop
    ip saddr 160.25.253.0/24 drop
    ip saddr 160.79.120.0/23 drop
    ip saddr 160.79.122.0/24 drop
    ip saddr 185.121.240.0/22 drop
    ip saddr 193.84.85.0/24 drop
    ip saddr 193.84.88.0/24 drop
    ip saddr 193.104.120.0/24 drop
    ip6 saddr 2a06:a180:10::/48 drop
    ip6 saddr 2a06:a180:1f::/48 drop
    ip6 saddr 2a06:a180:40::/48 drop
    ip6 saddr 2a06:a180:50::/48 drop
    ip6 saddr 2a06:a180:5f::/48 drop
… (5 more lines)