Package: fail2ban
Version: 0.8.3-2
Severity: wishlist

--- Please enter the report below this line. ---

It would be nice to be able to block repeated offenders for increasingly 
longer periods of time:

currently  fail2ban blocks an IP for  "bantime" after "maxretry" 
connections. Then the IP is unblocked. If that same IP tries again to 
connect after having been unblocked, a new  ban for a duration 
of "bantime" seconds is put in place.

But it would be great if the second time an IP starts to "attack" it gets 
blocked for a longer period of time, the third time for an even longer 
period etc.

As a similar example, in another machine i use pure iptables + recent rules 
to ban an IP connecting
   4    times in 30 sec   => banned for 1 minute
   12  times in 5 min    => banned for 10 minutes
   40  times in 1 hour   => banned for 3 hours
  100 times in 8 hours => banned for 1 day



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to