iptables: block all inbound traffic over a certain port number

Question

It is possible using iptables (on Debian) to block all inbound connections for all the ports with a port number over (as an example) 16000.

Like this (using 16000 as reference):

The port 15999 is open for input, instead from port 16000 to 65535 inbound connections are dropped.

Answer 1

Use Multiport for that

iptables -A INPUT -p tcp --match multiport --dports 16000:65535 -j DROP

also you may try

iptables -A INPUT -p tcp  --dport 16000:65535 -j DROP

Answer 2

If the ports are contiguous, like yours are, then use the

--destination-port,--dport [!] port[:port]

syntax to set up the range:

... --destination-port 16000:65535 ...

Answer 3

You have to block tcp and udp ports:

iptables -A INPUT -p tcp --match multiport --dports 16000:65535 -j DROP
iptables -A INPUT -p udp --match multiport --dports 16000:65535 -j DROP