- Cleanup rules in initialize.fw
- Drop /8's in initialize.fw with --dport 22 to squelch botnets
- Finalize host reporting syntax
- Native munin, less snmpd-only reporting
- Consider logger+hostname alternative for linking source_ip.log with host.
- Could just be an init script entry. Ignore excessive dns updates
- Or another named pipe in syslog-ng to filter requests
Add the rest of NOT keys