blob: caf5c56a2dd7efffee128f05da695c45a54e3b8d [file] [log] [blame]
Henrik Nordstromc2794132004-01-22 15:04:24 +00001This module matches a set of source or destination ports. Up to 15
Phil Oester86c85132005-06-11 16:27:10 +00002ports can be specified. A port range (port:port) counts as two
3ports. It can only be used in conjunction with
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01004\fB\-p tcp\fP
Henrik Nordstromc2794132004-01-22 15:04:24 +00005or
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01006\fB\-p udp\fP.
Henrik Nordstromc2794132004-01-22 15:04:24 +00007.TP
Marc Fournierae6f9b92009-01-15 13:57:53 +01008[\fB!\fP] \fB\-\-source\-ports\fP,\fB\-\-sports\fP \fIport\fP[\fB,\fP\fIport\fP|\fB,\fP\fIport\fP\fB:\fP\fIport\fP]...
Henrik Nordstromc2794132004-01-22 15:04:24 +00009Match if the source port is one of the given ports. The flag
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010010\fB\-\-sports\fP
Jan Engelhardt9b488b92008-06-08 19:11:51 +020011is a convenient alias for this option. Multiple ports or port ranges are
12separated using a comma, and a port range is specified using a colon.
13\fB53,1024:65535\fP would therefore match ports 53 and all from 1024 through
1465535.
Henrik Nordstromc2794132004-01-22 15:04:24 +000015.TP
Marc Fournierae6f9b92009-01-15 13:57:53 +010016[\fB!\fP] \fB\-\-destination\-ports\fP,\fB\-\-dports\fP \fIport\fP[\fB,\fP\fIport\fP|\fB,\fP\fIport\fP\fB:\fP\fIport\fP]...
Henrik Nordstromc2794132004-01-22 15:04:24 +000017Match if the destination port is one of the given ports. The flag
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010018\fB\-\-dports\fP
Henrik Nordstromc2794132004-01-22 15:04:24 +000019is a convenient alias for this option.
20.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010021[\fB!\fP] \fB\-\-ports\fP \fIport\fP[\fB,\fP\fIport\fP|\fB,\fP\fIport\fP\fB:\fP\fIport\fP]...
Rusty Russell56506a12005-05-25 08:10:03 +000022Match if either the source or destination ports are equal to one of
23the given ports.