I removed the directory, d'loaded revision 503, modified iptable.config per the settings you provided above, then ran "make menuconfig > Custom kernel settings" + "make"... and it does goes ahead with no prompt. I guess running "make clean" isn't enough. Thank you.

Instead of checking the log files and reconfigure iptables on the fly, provided the kernel is not too old, Netfilter/iptables itself supports banning hosts that are making too many connections.

I've seen those mentionned on the Net:
====================
iptables -A INPUT -p udp --dport 5060 -m state --state NEW -m recent --set --name SIP

iptables -A INPUT -p udp --dport 5060 -m state --state NEW -m recent --rcheck --name SIP --seconds  600 --hitcount  20 --rttl -j DROP

iptables -A INPUT -p udp --dport 5060 -j ACCEPT
====================
iptables -A INPUT -p tcp --dport 5060 -m state --state NEW -m sshbrute --set
iptables -A INPUT -p tcp --dport 5060 -m state --state NEW -m sshbrute --update --seconds 60 --hitcount 4 -j DROP
====================

Yes, it's because BAPS uses the 2007 release of uClinux. Switchfin, however, uses the 2009 release and supports the "state" module, along with "length", "recent", "string", etc.