deny cgi scanner

[Eric Marchionni <mailing-lists@xxxxxx>]

hi all

does anybody know how to drop packets with
destination-port 80 after a limit of connections
has been reached?
i'd like to deny access for the attacker as soon
as a cgi-scan has been detected.

is it possible to do that with iptables?

plz let me know =)
thx
eric