Re: IPTables question

[Pascal Hambourg <pascal@plouf.fr.eu.org>]

Hello,

Bill.M a écrit :
> 
> In IPTables one can specify multiple addresses, and multiple ports, but 
> is there anyway to specify multiple interfaces.
> 
> For example,  -m multiport --destination-port 22,25,80
> 
> Or 	      -s 1.2.3.4,1.2.3.5,1.2.3.7 or -s 1.2.3.4:1.2.3.10

In addition to David's answer :
Unless recent change I am not aware of, you cannot specify an address
range in -s or -d. You must use the "iprange" match instead (or ipset if
your kernel supports it). Also, note that specifying multiple
comma-separated addresses or prefixes in -s or -d will result in
multiple rules being actually created, which can have undesirable
side-effects and impact efficiency.