One can set
findtime in nginx fail2ban jail. This is the amount of time during which a recurring pattern is counted (called
My question is, which of the following is true:
A - If findtime of 60 seconds is set, fail2ban will take action after the 60 seconds are over.
B - If findtime of 60 seconds is set, fail2ban will take action even if the 60 seconds aren't over yet, but the 'maxretry` has been reached.
I ask for this distinction because I have a jail where I have set:
findtime = 300 maxretry = 5
Does this mean action will only take place once the 300 seconds are up? If so, I'm going to reduce
findtime to 5 (or something similar).