Peggy Kam wrote:
did the manpage gets changed recently? the iptables manpage that I see states that: --port [port[,port]] Match if the both the source and destination ports are equal to each other and to one of the given ports.
I see. You are referring to -m mport --port*s* (by the way, there is a typo or are you referring to another module ?), which is different from -m multiport --port*s* port[...] - which I was referring to. Your rule was
... -m multiport --ports 22,23,24,25 -j ACCEPT So I looked for multiport. HTH, Joerg