IP address, subnet, or range ipv4 IPv4 address to match ipv4net IPv4 prefix to match ipv4range IPv4 address range to match !ipv4 Match everything except the specified address !ipv4net Match everything except the specified prefix !ipv4range Match everything except the specified range Port number 1-65535 Numeric IP port start-end Numbered port range (e.g., 1001-1005) \n\nMultiple destination ports can be specified as a comma-separated list.\nThe whole list can also be negated using '!'.\nFor example: '!22,telnet,http,123,1001-1005'