how to allow/block big portranges (30000-65500)?

[c33s]

programs as firefox require access to a dynamic port on localhost to work. as i want to keep lower ports free for nondynamic usage, i normally (old OS) created a rule for the portranges around 30000-65500.

as opensnitch only supports regex for ports this gets really nasty:

^(3[0-9]{4}|[4-5][0-9]{4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])$

is there an alternative for that? is there support for ipset or is this ugly regex the only way to do that?

refs:

• [Feature Request] <title>Auto generate regular expressions / simplify data input fields. #1392
• [Feature Request] <Port Range should be simplify> #960

[gustavo-iniguez-goya]

Hi @c33s , right now the only way of doing it is with regular expressions ... slow and super ugly.

But I've just implemented it and seems to work fine. I'll test it and commit it soon.