Your message dated Sun, 7 Sep 2008 20:52:27 -0400 with message-id <[EMAIL PROTECTED]> has caused the report #498164, regarding [fail2ban] Allow repeated attacker to be blocked for increasingly longer times to be marked as having been forwarded to the upstream software author(s) Cyril Jaquier <[EMAIL PROTECTED]>
(NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 498164: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498164 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---PS sorry for double post -- I managed to screw up email address.. please use this one to reply Progressive banning time is indeed a nice feature to request and I think it was requested before. I will just forward this wishlist upstream to make sure all parties are aware ;-) On Sun, 07 Sep 2008, Ariel Garcia wrote: > Package: fail2ban > Version: 0.8.3-2 > Severity: wishlist > --- Please enter the report below this line. --- > It would be nice to be able to block repeated offenders for increasingly > longer periods of time: > currently fail2ban blocks an IP for "bantime" after "maxretry" > connections. Then the IP is unblocked. If that same IP tries again to > connect after having been unblocked, a new ban for a duration > of "bantime" seconds is put in place. > But it would be great if the second time an IP starts to "attack" it gets > blocked for a longer period of time, the third time for an even longer > period etc. > As a similar example, in another machine i use pure iptables + recent rules > to ban an IP connecting > 4 times in 30 sec => banned for 1 minute > 12 times in 5 min => banned for 10 minutes > 40 times in 1 hour => banned for 3 hours > 100 times in 8 hours => banned for 1 day -- Yaroslav Halchenko Research Assistant, Psychology Department, Rutgers-Newark Student Ph.D. @ CS Dept. NJIT Office: (973) 353-5440x263 | FWD: 82823 | Fax: (973) 353-1171 101 Warren Str, Smith Hall, Rm 4-105, Newark NJ 07102 WWW: http://www.linkedin.com/in/yarik
--- End Message ---
