Script Iptables anti-scan port

Need a IPTABLES Script that block all types of scan port existent, and only allow "x" port connection on server. Need two options one to allow port UDP and other allow port TCP, to my application working on it. Need create one, because thats already created on google contains flaws. They need BLOCK PortSCAN and also save IP that try port scan on permanent ban, and also allow this ip to working after two days.