// ZSCALER / NFTABLES

zscaler · nftables

nftables ruleset for zscaler CIDRs. 968 CIDRs, refreshed daily.

// nftables_zscaler_allow.conf

DOWNLOAD ↓ ·

# Zscaler IP Ranges
# Updated: 2026-08-26 02:42:17
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for zscaler

table inet filter_zscaler_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 8.25.203.0/24 accept
    ip saddr 8.34.34.0/24 accept
    ip saddr 8.35.35.0/24 accept
    ip saddr 64.62.169.0/24 accept
    ip saddr 64.215.22.0/24 accept
    ip saddr 70.39.159.0/24 accept
    ip saddr 70.40.176.0/23 accept
    ip saddr 70.40.178.0/24 accept
    ip saddr 87.58.64.0/18 accept
    ip saddr 89.18.89.0/24 accept
    ip saddr 89.18.90.0/24 accept
    ip saddr 101.2.192.0/18 accept
    ip saddr 104.129.192.0/20 accept
    ip saddr 120.29.239.0/24 accept
… (138 more lines)

// nftables_zscaler_deny.conf

DOWNLOAD ↓ ·

# Zscaler IP Ranges
# Updated: 2026-08-26 02:42:17
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for zscaler

table inet filter_zscaler_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 8.25.203.0/24 drop
    ip saddr 8.34.34.0/24 drop
    ip saddr 8.35.35.0/24 drop
    ip saddr 64.62.169.0/24 drop
    ip saddr 64.215.22.0/24 drop
    ip saddr 70.39.159.0/24 drop
    ip saddr 70.40.176.0/23 drop
    ip saddr 70.40.178.0/24 drop
    ip saddr 87.58.64.0/18 drop
    ip saddr 89.18.89.0/24 drop
    ip saddr 89.18.90.0/24 drop
    ip saddr 101.2.192.0/18 drop
    ip saddr 104.129.192.0/20 drop
    ip saddr 120.29.239.0/24 drop
… (138 more lines)