Usually, the messages are limited to 4, although I've seen as many as 100 at a time, even though I have checked 'Limit Logging'. However, the past 2 hours I've received over 500 emails telling me a port scan was detected. Turning off anti-portscan is a bit like unlocking your doors when a burglar tries the knob, so I'd like to find a better solution. I have selected to limit port scan messages, but it's not working. Nor is it doing a good job of blocking this guy's IP address.
Is there a way to hack these settings directly? Specifically, I'd like anti-portscan to block an offending IP address for a month, and notify me only once.
This thread was automatically locked due to age.