B
не попадался, поищу, спасибо
ipset -A privileged 1.2.3.4
ipset -A privileged 1.2.3.5
ipset -A privileged 1.2.3.6
############
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp -m multiport --dports 22,80,443 -j ACCEPT
iptables -A INPUT -p tcp -m multiport --dports 123,456 -m set --match-set privileged src -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -j DROP