Does "Source IP" in port forwarding support the subnet mask format?

[startover909]

I can't seem to find this anywhere in any documentation. Can you put something like x.x.x.x/25 in the source IP field of the port forwarding to restrict access to specified remote hosts? The web GUI does accept the input, but I tried to enter something invalid like x.x.x.x/abc and it also gets accepted so it seems the GUI does not do a REGEX check on this at all.

 

[RMerlin]

I can't seem to find this anywhere in any documentation. Can you put something like x.x.x.x/25 in the source IP field of the port forwarding to restrict access to specified remote hosts? The web GUI does accept the input, but I tried to enter something invalid like x.x.x.x/abc and it also gets accepted so it seems the GUI does not do a REGEX check on this at all.

In theory it should work - looks like the iptables rule does get properly generated.

    0     0 DNAT       tcp  --  *      *       72.1.2.0/24      0.0.0.0/0            tcp dpt:1515 to:192.168.10.100:1515