How to add multiple IPs in one iptables command line? sudo iptables -A INPUT -p tcp --dport 22 ! -s 1.2.3.4 -j DROP
Solution 1:
You can use an IP set.
Depending on your distro you may need to install the ipset utility first.
#(For Debian and Debian-derived distros)
sudo apt install ipset-persistent
Then you create a set with a friendly name.
sudo ipset create ssh_friends iphash
Once you have a set, you can add IPs to it.
sudo ipset add ssh_friends 1.2.3.4
sudo ipset add ssh_friends 11.22.33.44
Now you can use the set you created in an iptables rule instead of individual IPs.
sudo iptables -A INPUT -p tcp --destination-port 22 -m set ! --match-set ssh_friends src -j DROP