IP Allowlist / Blocklist Generator

Paste IPs or CIDR ranges, choose allow or block mode, select your target platform, and click Generate. The tool parses and validates each entry, then outputs platform-specific rules.

Supported platforms

• Nginx — allow/deny directives or a geo block that maps IPs to a variable for flexible use in if conditions.
• Apache — Require ip directives inside <RequireAll> / <RequireAny> blocks (Apache 2.4+ syntax).
• iptables — -A INPUT -s <ip> -j ACCEPT/DROP rules with optional protocol, port, and interface filters.
• UFW — ufw allow/deny from <ip> commands with optional port and protocol.
• nftables — named sets with ip saddr / ip6 saddr match rules inside a specified table and chain.
• AWS Security Groups — outputs AWS CLI commands, Terraform aws_security_group_rule resources, or raw JSON IpPermissions.
• Cloudflare — outputs a Cloudflare API-compatible JSON payload for IP Access Rules with the selected action.

Input format

• One IP or CIDR per line, or comma / space separated.
• Supports IPv4 (192.168.1.0/24) and IPv6 (2001:db8::/32).
• Lines starting with # are treated as comments and preserved in the output.
• Invalid entries are highlighted and skipped.