IPTables -m set unknown option

Incorrect syntax:

# iptables -A INPUT -m set -–match-set cf src -p tcp -m multiport –dports http,https -j ACCEPT

Correct syntax:

# iptables -A INPUT -m set --match-set cf src -p tcp -m multiport --dports http,https -j ACCEPT

At two places, one or two (hyphen: u002d) were replaced with a (en dash: u2013). Be careful when using word processors not designed for programming when copying scripts through them: they can alter what looks like punctuation to them but is a syntax that must not be altered. Same goes when retrieving this from some web sites not handling things correctly or even some PDF documents.