@meowski

> fail2ban is way cuter though.

It's not. It's putting 911 on speed-dial.

> you just enable the "jail" for any services that you might be running

If it's easier and it doesn't do what I want, it doesn't matter. In this case, it's also not easier. Your mileage may vary. You might want something different.

When you need a real programming language, it's easier to use a real programming language than the ad hoc one they cram into an overgrown config file. It's easier to debug a piece of code that is smaller than the config file would have to be. It's easy to add a piece that, in the same pass, does, say, a running average of backend response time and only bothers with the reqs that are at least a standard deviation over the average. It can draw a histogram. Give me another five lines and the histogram can be an SVG; I don't want an SVG so it doesn't.

I don't know why you wanna argue about this, I don't wanna argue about it. If it works for you, great.