What you need is the mport-match: iptables -A FORWARD -p tcp -m mport --sport 5000:5020 -m state ... Sven Patrick Ahler wrote:
1. Is there a way to specify a range of source ports when setting a rule. My
ftp server uses ports 5000-5020 for passive but I don't want to have to
write a rule for each port. (For a network firewall). The ftp server is
behind the firewall.
iptables -A FORWARD -p tcp --sport 5000 -m state --state
NEW,ESTABLISHED,RELATED -j ACCEPT
