请教一个简单iptables的写法

galaxy001

要求对21,22端口只允许几个mac的网卡连接,如何写简单高效?

winktv2008

iptables -A INPUT -p tcp --dport 20:22 -m mac --mac-source 00:00:00:00:00:01 -j ACCEPT
iptables -A INPUT -p tcp --dport 20:22 -m mac --mac-source 00:00:00:00:00:02 -j ACCEPT

iptables -A INPUT -p tcp --dport 20:22 -m mac --mac-source 00:00:00:00:00:03 -j ACCEPT
iptables -A INPUT -p tcp --dport 20:22 -m mac --mac-source 00:00:00:00:00:04 -j ACCEPT