KfWiki: Interesting options of iptables

Do you know...

you can add comment to iptables rules by

iptables -I INPUT 1 -p tcp --dport 22 -j ACCEPT -m comment --comment "Incoming SSH"

you can specify ip range

iptables -I INPUT 1 -m iprange --src-range 10.0.0.1-10.0.0.254 --dst-range 10.2.0.1-10.2.0.254 -j ACCEPT

you can specify multiple ports

iptables -I INPUT 1 -p tcp -m multiport --dports 20:22,25,80,110,443 -j ACCEPT

KfWiki : LinuxIptables