Specify a port range!!

RouterOS General
1

Hi,

I want to create a firewall rule to block ports 1024 to 1862, 1864 to 3127, 3129 to 65535 and I want to specify all these por ranges in only one rule, an not want to create one rule per port range.. It is possible?

Thanks…

2

I don’t think this is possible in 2.9. Any reason it has to be 1 rule? In the end RouterOS is going to spend just as much time reviewing 1 rule with 3 port ranges as 3 rules with 1 port range each.

Sam

3

Cant do this in one rule. You need a rule per port.

Specifying ranges simplifies administration, so IMHO it should be added. I see no reason why I must enter 2000 rules to block 2000 ports when it can be done with one rule (regardless how long the router takes to process).

4

Cant do this in one rule. You need a rule per port.

One rule per range of ports. If you want to block 2000 ports and they are all sequential you can use dst-port=1024-3024.

Sam