Snort

[newbieuser1234]

Does anyone know the syntax to add a custom rule to snort to block someone is scanning you slowly?  Say I want to have snort block everyone who scans every port but port 3390?  I have my firewall configured correctly to only allow one port, but does having snort block the IP do anything extra? Thanks.