Suricata to block time on home use!

[micropone]

how long should I block an attack? default says 1 hr… is that good enough? what do you guys do?

[bmeeks]

In my opinion, especially for home use, one hour is enough.  Any kind of scanner or automated attack is going to give up in a short time and move on to fish someplace else.  Only somebody who was after you specifically might try for a longer time, but even then 1 hour should discourage them.  Of course it is highly unlikely you get targeted as a home user anyway unless you moonlight as Dr. Evil  ;).

Bill

[micropone]

thanks Bill

you tha MAN