I have a fail2ban configured like below:
- block the ip after 3 failed attempts
- release the IP after 300 sec timeout
This works perfectly and I want to keep it this way such that a valid user gets a chance to retry the login after the timeout. Now, I want to implement a rule where if same IP is been detected as attack and blocked, unblocked 5 times, permanently block the IP and never unblock again. Can this be achieved with fail2ban alone or I need to write my own script to do that?
I am doing this in centos.