I just tried to enable remote access by SSH. I'm on Tomato v1.28.7634 Toastman-IPT-ND ND Std. For some reason no one from the outside saw the open port 2222. After disabling the "Limit Connection Attempts" further down it worked. This is what the iptables-rules look like on my system: Code: root@unknown:/tmp/home/root# less /etc/iptables | grep shlimit -N shlimit -A shlimit -m recent --set --name shlimit -A shlimit -m recent --update --hitcount 4 --seconds 60 --name shlimit -j DROP -A INPUT -p tcp --dport 22 -m state --state NEW -j shlimit -A INPUT -p tcp --dport 2222 -m state --state NEW -j shlimit -A INPUT -p tcp --dport 23 -m state --state NEW -j shlimit Somewhere on tomatousb.org somebody said it went away after rebooting, but I didn't try that. I just needed remote access for this one time. As I understand the iptables-rules this should allow for 4 connection attempts every 60 seconds on each of the mentioned ports. I just can't imagine that all those attempts were already made when I opened port 2222. What I can imagine, though, is that for some reason the rules are not being jumped to. But that seems unlikely since the chain shlimit sees traffic. What's a bit strange is something else, too: In the GUI it says "3" connection attempts, but iptables says "4". Maybe somebody has an explanation.