Hi All,

What is the collective behavior of the three g_bad_login parameters shown below

         g_bad_login_mins "10"
         g_bad_login_allow "10"
         g_bad_login_ip_allow "10"

The counting of the allow parameter, i.e. in the above case 10, is counted over what window of time? The explanation for the parameter says "Number of consecutive bad logins for a user before blocking that user or IP." Can that 10 consecutive bad logins happen over the period of days or weeks after which that user or IP is blocked for 10 minutes?

Once a block for 10 minutes happens, does the counter for consecutive bad logins get reset? or will the 11th bad login cause the system to block that IP or user for 10 more minutes?

Any clarification on the above would be helpful.

Thanks,

Parasu.