$IPT -A INPUT -p tcp -m state --state NEW --dport 22 -m recent --update --seconds 15 -j DROP $IPT -A INPUT -p tcp -m state --state NEW --dport 22 -m recent --set -j ACCEPT # Have these rules take effect when iptables is started /sbin/iptables-save | sed -e 's/eth0/ethtemp/' -e 's/eth1/eth0/' -e 's/ethtemp/eth1/' | iptables-restore /sbin/service iptables save