Can any one can say definitively that using the
--multiport extension with iptables rules:
Is faster than creating a rule per port?
Is slower than creating a rule per port?
Makes no difference?
If I had to guess, I would think #1 is most likely, but recognize there must be a chance of #2 or #3 as well. The www.iptables.info description of multiport matching doesn't say anything one way or the other.