
 Yakim - 2014-03-21 06:13:16
 
One suggestion:  consider adding dimensions to the apacheaccesspaterns[] array, to store a "severity" value and "blockduration" for each element. It would be desirable to have some, but not all, patterns trigger blocking after just one match found in logs.