Hi Benny,

>> sudo iptables -I INPUT -p tcp --dport 23 -i eth0 -m state --state NEW
>> -m recent --set

> imho invalid

That's the first step.  That step must be folllowed by #2 below.  How do
you think Shorewall works?  it sets the same type commands as these two
with Python scripts 

>> sudo iptables -I INPUT -p tcp --dport 23 -i eth0 -m state --state NEW
>> -m recent --update --seconds 30 --hitcount 2 -j DROP

>> All of a sudden idiots cannot connect here after 30 seconds 

> indeed, just remember i say i would like to help you with shorewall ?

Not needed, and not wanted here.  I can control it all by setting the
dport, and seconds after their initial connect.

Most people don't understand Iptables.  It's not hard to work with when you
understand it.

Here is what I'm using now, works great: Step 1:
sudo iptables -I INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m recent --set

Step 2:
sudo iptables -I INPUT -p tcp --dport 23 -i eth0 -m state --state NEW -m
recent --update --seconds 60 --hitcount 4 -j DROP

I use the same commands for port 8080 btw.

These commands will flush your iptables filewall, and remove all currently
active rules when you want to change the settings.

iptables -F
iptables -X

Take care,
Janis

--- BBBS/Li6 v4.10 Dada-2