we're looking for sophisticated iptables / firewall code at any time.

don't forget: the fewer fa*t you let today, the lesser the malodorousness in future!