I'm surprised that none of you asked him: [1] what changed? and suggested [2] fail2ban JIM On 8/15/2016 10:47 AM, Miles D. Oliver via Novalug wrote: > DRAT.. > > OSSEC active-response was adding an IPTables rule. > > More later.