*filter
:HACKED -
:HACK-LOG -
-A HACKED -p tcp -m tcp --dport 22 -j HACK-LOG
-A HACKED -p tcp -m tcp --dport 23 -j HACK-LOG
-A HACKED -p tcp -m tcp --dport 25 -j HACK-LOG
-A HACKED -p tcp -m tcp --dport 80 -d 10.102.0.0/16 -j DROP

-A HACK-LOG -m recent --update --seconds 600 -j DROP
-A HACK-LOG -m recent --set -j LOG --log-prefix "HACKED: "
-A HACK-LOG -j DROP

-A FORWARD -i vlan300 -j HACKED

COMMIT
