blob: 39183151427212c9089b8dcafdb486e290cec75b [file] [log] [blame]
Henrik Nordstromc2794132004-01-22 15:04:24 +00001This module matches a set of source or destination ports. Up to 15
Phil Oester86c85132005-06-11 16:27:10 +00002ports can be specified. A port range (port:port) counts as two
3ports. It can only be used in conjunction with
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01004\fB\-p tcp\fP
Henrik Nordstromc2794132004-01-22 15:04:24 +00005or
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01006\fB\-p udp\fP.
Henrik Nordstromc2794132004-01-22 15:04:24 +00007.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01008[\fB!\fP] \fB\-\-source\-ports\fP,\fB\-\-sport\fP \fIport\fP[\fB,\fP\fIport\fP|\fB,\fP\fIport\fP\fB:\fP\fIport\fP]...
Henrik Nordstromc2794132004-01-22 15:04:24 +00009Match if the source port is one of the given ports. The flag
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010010\fB\-\-sports\fP
Jan Engelhardt9b488b92008-06-08 19:11:51 +020011is a convenient alias for this option. Multiple ports or port ranges are
12separated using a comma, and a port range is specified using a colon.
13\fB53,1024:65535\fP would therefore match ports 53 and all from 1024 through
1465535.
Henrik Nordstromc2794132004-01-22 15:04:24 +000015.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010016[\fB!\fP] \fB\-\-destination\-ports\fP,\fB\-\-dport\fP \fIport\fP[\fB,\fP\fIport\fP|\fB,\fP\fIport\fP\fB:\fP\fIport\fP]...
Henrik Nordstromc2794132004-01-22 15:04:24 +000017Match if the destination port is one of the given ports. The flag
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010018\fB\-\-dports\fP
Henrik Nordstromc2794132004-01-22 15:04:24 +000019is a convenient alias for this option.
20.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010021[\fB!\fP] \fB\-\-ports\fP \fIport\fP[\fB,\fP\fIport\fP|\fB,\fP\fIport\fP\fB:\fP\fIport\fP]...
Rusty Russell56506a12005-05-25 08:10:03 +000022Match if either the source or destination ports are equal to one of
23the given ports.