chuck_16066
Jan 25, 2010Nimbostratus
Packet filter and port range
I need to do packet filter rules with a dynamic port range like 1024 - 65535. However, the packet filter rule does not take the TCPDUMP format of:
( dst portrange 1024-65535 )
In the GUI for packet filter rules, the rule expression:
( proto TCP ) and ( src net 172.xx.xx.0/24 ) and ( dst host 10.xx.xx.xx ) and ( dst portrange 1024 )
will produce error:
Packet filter rule 'ServerTestInt_DC001_dynamic': unknown host 'portrange'
The expression seems to like:
( dst port 1024 )
But not:
( dst portrange 1024-65535 )
Has anyone ran across this before? How can I implement a port range packet filtering?
Thanks for your help.