@@ -111,6 +111,7 @@ setup_badips() {
setup_scanips() {
ipset create -! $scanset hash:ip hashsize 4096 timeout $scanttl maxelem $scanmaxelems
+ ${iptables} -A INPUT -i ${wan} -j SET --add-set $scanset src --exist --timeout $scanttl
if $loginput ; then
${iptables} -A INPUT -j WAN-LOG-DROP
fi