From aa472c96c6b6d78a216e937aff5c99c327b4f913 Mon Sep 17 00:00:00 2001
From: Kroese <kroese@users.noreply.github.com>
Date: Fri, 15 May 2026 23:28:01 +0200
Subject: [PATCH] feat: Use iptables multiport extension (#1144)

---
 src/network.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/network.sh b/src/network.sh
index 6a44284..49edc6c 100644
--- a/src/network.sh
+++ b/src/network.sh
@@ -501,7 +501,11 @@ configureNAT() {
   exclude=$(getHostPorts)
 
   if [ -n "$exclude" ]; then
-    exclude=" ! --dport ${exclude//,/ ! --dport }"
+    if [[ "$exclude" != *","* ]]; then
+      exclude=" ! --dport $exclude"
+    else
+      exclude=" -m multiport ! --dports $exclude"
+    fi
   fi
 
   if ! iptables -t nat -A POSTROUTING -o "$VM_NET_DEV" -j MASQUERADE > /dev/null 2>&1; then