I've searched and searched and can't find any information on how iptables parameters are combined.
If I want to match traffic to or from an IP address can I do -s a.b.c.d -d a.b.c.d
? That is, are the -s
and -d
parameters combined as or (packet matches any) or and (packet matches all)?
Somewhat related, how do -m iprange
and -s
and -d
interact? That is, can I use -m iprange --src-range 10.0.0.1-10.0.0.8
to specify a range then add -s !10.0.0.5
to make an exception?