iptables match multiport - need clarification : dport or dports , sport or sports - Ask Ubuntu
what best practice, mean when not using long version -destination-port or -source-port
we see both on various web sites. iptables.info never speaks of --dports or --sports.... please?
from man iptables-extensions
:
multiport module matches set of source or destination ports. 15 ports can specified. port range (port:port) counts 2 ports. can used in conjunction 1 of following protocols: tcp, udp, udplite, dccp , sctp. [!] --source-ports,--sports port[,port|,port:port]... match if source port 1 of given ports. flag --sports convenient alias option. multiple ports or port ranges separated using comma, , port range specified using colon. 53,1024:65535 therefore match ports 53 , 1024 through 65535. [!] --destination-ports,--dports port[,port|,port:port]... match if destination port 1 of given ports. flag --dports convenient alias option. [!] --ports port[,port|,port:port]... match if either source or destination ports equal 1 of given ports.
Comments
Post a Comment