@8b688784 Maybe I should try configuring nftables so if it tries a bullshit <1024 port like say 123/tcp (NTP) they get blackholed like a sort of reverse port-knock.