forwarding virtual server, with a port range?

You should be able to do this by setting up a wildcard forwarding virtual server and then applying an iRule to restrict the ports allowed. Something like this:

when CLIENT_ACCEPTED {
    if { ([TCP::local_port] < 10000) || ([TCP::local_port] > 12000) } {
        drop 
    }
}