> 
> Hi,
> I was thinking of a feature I could want on my router: a tool that could
> automatically detect scans, and update a blacklist and filters automatically.
> 
It may be hard to do. ICQ for example _does_ a port-scan that is a part of
the ICQ protocol, and that is very hard to differ from "evil" port-scans.

Also, it would take lots of time from the firewall stuff...

-- Ragge