Simple question: src-port or dst-port

RouterOS General
1

Hello I’m studying the firewall mangle and would like some advice on my example

/ip firewall mangle
add chain=prerouting action=mark-connection new-connection-mark=ftp_conn passthrough=yes protocol=tcp dst-port=21,22 comment="FTP"
add chain=prerouting action=mark-packet new-packet-mark=ftp_sftp passthrough=no connection-mark=ftp_conn comment="FTP"

and

/queue simple 
add name="Priority_3" target-addresses="" interface=all parent=main packet-marks=ftp_sftp direction=both priority=3 queue=default-small/default-small limit-at=0/0 max-limit=1M/1M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

my simple question is in /ip firewall mangle is it corrects define dst-port=21,22 or src-port=21,22?

thanks cetalfio

2

The ports are the destination ports for a typical FTP session but not that the relevant port pair is 20/21. 22 is used by SSH.