Hi,
based on this solution I wrote a shell script, which is blocking port scanning, so nobody can find (or much more slowly) your "hidden" SSH or FTP port The protection based on built-in firewall.
The script stored on GitHub:
Portcan Protection
I hope you find it useful!
Best Regards,
Feriman