To echo what many others have said, an IDS is your best bet for such a problem. Particularly, I recommend the Snort IDS. It is very effective, and offers both free rulesets (they are 30 days old, but will catch most skiddie junk), and subscription rulesets (the latest and greatest, but cost money).


