While ago, I wrote an answer to the question "I need rules to drop some malicious Apache connection".
Since then, I feel the answer incomplete. The reason is that, I made few scripts (1, 2, 3), which are the main contribution of the answer. But because the answer is too long, due to the character limit, I moved these scripts outside.
So my question is:
Is it a good idea to split the answer in two parts and move these scripts into answer's body?
 The answer probably goes out of scope of this format, but while I wrote it I generalised my experience and also gained a new. In the end of all, the answer contains several useful ideas and references according to the question.
Update: The discussed answer is completely updated.
I followed the advises given here and created a GitHub repository named WWW Security Assistant. There is a branch, called
ask_ubuntu, dedicated to the discussed answer. So the further updates will be applied on the