Nat reversal with all Cloudflare public address

[Jellyman2611]

Hello all, So I host a couple of services on my home network and would like to set up Port forwarding on them. I linked my google domain with Cloudflare to help monitor traffic and for protection. So I only want to answer traffic that has come from Cloudflare first. The problem is Cloudflares has a lot of public IP addresses I would have to add static nats for. Is there a way to make an ACL of all their IP address and then specify that ACL in ip nat inside static command?  

[Jon Marshall]

You could try using a route map with your static NAT but I am not sure you can use it for port forwarding. 

That said you should not rely on NAT for security which is what you are trying to do here. 

You should be using acls on the WAN interface to restrict which IPs can connect your services. 

Jon