ipset -N kiddies iphash iptables -t raw -N kiddies iptables -t raw -A kiddies -j MARK --set-mark 13 iptables -t raw -A kiddies -j CT --notrack iptables -t raw -I PREROUTING -m set --match-set kiddies src -j kiddies iptables -N kiddies iptables -A kiddies -p tcp -j CHAOS --tarpit iptables -A kiddies -j DROP iptables -N blklst_n_lock iptables -A blklst_n_lock -j SET --add-set kiddies src iptables -A blklst_n_lock -j kiddies iptables -I INPUT -m psd -j blklst_n_lock iptables -I INPUT -m mark --mark 13 -j kiddies