Access Control Lists (ACLs)
Access Control Lists (ACLs) define allowed source IP addresses from where servers accept incoming data or control messages.
When setting up new DNS zone transfers (incoming or outgoing), you will need to update the ACL at your other DNS provider(s) to allow Cloudflare to communicate with their server(s). You can find the Cloudflare IP addresses you need to allow at your other DNS provider(s) at Cloudflare IP addresses.
You need to create a new ACL in your Cloudflare account in the following situations if you want to specify additional NOTIFY IPs that Cloudflare should listen to (Cloudflare as secondary) or additional IPs Cloudflare should accept zone transfer requests from (Cloudflare as primary).