The good thing about having a server under some very consistent heavy attack is that you have a good test case for tuning up the counter defenses. Just "iptables -F" and watch it all work again. And again.. And again. I wouldn't call it "smart" or "intelligent" but "elegantly effective simple" seems to be working very well. Someone really wants this system. They've been at it for a few weeks from the same IP ranges, probably because of it handling some VPN and VoIP traffic from "interesting" places. Overseas, not Minneapolis MN. Other similar servers are getting the usual random smear of attempts. #apt