Suricata to block time on home use!



  • how long should I block an attack? default says 1 hr… is that good enough? what do you guys do?



  • In my opinion, especially for home use, one hour is enough.  Any kind of scanner or automated attack is going to give up in a short time and move on to fish someplace else.  Only somebody who was after you specifically might try for a longer time, but even then 1 hour should discourage them.  Of course it is highly unlikely you get targeted as a home user anyway unless you moonlight as Dr. Evil  ;).

    Bill



  • thanks Bill

    you tha MAN