1. Is there a way to specify a range of source ports when setting a rule. My ftp server uses ports 5000-5020 for passive but I don't want to have to write a rule for each port. (For a network firewall). The ftp server is behind the firewall. iptables -A FORWARD -p tcp --sport 5000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT