Auto-expire IP Blocks Based on specified criteria

[lbeachmike]

Hi there -

Is it possible to implement something like expiring blocked IPs automatically based on user-specified criteria such as originating country?

For example, I want US-based IP blocks to expire in 60 minutes and China-based IP blocks to expire in 12 hours.

That would go a long way to easing the support demands of false-positive IP blocks while not sacrificing much in the way of security.

Thanks.

Mike

[chirpy]

It's not possible within the product. You might be able to rig something up using a hook script using the BLOCK_REPORT feature of csf.