$BIN -A INPUT -j scan-drop 
        $BIN -A scan-drop -m limit --limit 10/min -j DROP
        $BIN -A scan-drop -p tcp -m limit --limit 1/sec -j REJECT --reject-with tcp-reset
        $BIN -A scan-drop -p udp -m limit --limit 1/sec -j REJECT --reject-with icmp-port-unreachable
        $BIN -A scan-drop -m limit --limit 1/min -j REJECT --reject-with icmp-host-prohibited
        $BIN -A scan-drop -m limit --limit 10/sec -j DROP
        $BIN -A scan-drop -m limit --limit 1/sec -j ULOG --log-prefix "SCAN"
        $BIN -A scan-drop -j DROP

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