Default Ban time duration

Hi,
My question is about the defaut ban time duration in sshd detection scénario.
Thanks.

Hello,

By default, the ban durations are 4 hours.

However, you can edit the profiles.yaml to change the default or have different ban duration per scenario.

2 Likes

merci :slight_smile:

I’ve noticed that after an update the profiles.yaml file was overwritten changing the ban duration back to the default of 4 hours.

Is it possible to make a custom setting that isn’t overwritten when there is an update?

2 Likes

Hello @gppixelworks !

Currently, there is no way to prevent this sorry, but I’ve open an issue so we can deal with it !

https://github.com/crowdsecurity/crowdsec/issues/397

1 Like