[cqs 5]

[zhang888 1066]

Yes this is possible with --lport directive.

However this is not very recommended, from many perspectives, and you will not gain any extra security

from this setting.

 

You should look into hardening your security on the network layer, not the transport layer.

So you will have a better solution dropping all connections to any destination except your entry IP.

 

Specifying a local port is not advisable for privacy reasons as well. If your ISP provides an IP address

behind NAT, they share the same IP address among many subsribers without virtually knowning who is

who. By using specific patterns and hard coded ports you are losing this little benefit.