Use separate lists for TCP and UDP ports to don't bother about destination ip, it is checked earlier