Temporary Bans
See every active temporary ban with its remaining time, and lift bans early.
About This Page
Lists active temporary bans from /var/lib/seclayer/seclayer.tempban, including bans added automatically by LFD and DDoS protection. Each entry shows the IP, port (or All), time until it expires, direction and the reason.
How to Use
- Navigate to Firewall > Temporary Bans.
- Review the bans and their remaining time.
- Click the unlock icon to lift a ban early.
- To add a temporary ban or allow, use Deny IPs or Allow IPs with Type set to Temporary.
Paging and Export
- Use Entries Per Page (10, 25, 50, 100 or All; default 50) and the page buttons to move through long lists. Total shows the number of entries.
- Export CSV downloads the full list.
CLI Equivalent
Manage temporary bans and temporary allows from SSH:
# Temporarily ban an IP for 1 hour (3600 seconds):
seclayer -td 203.0.113.88 3600 "Brute force attack"
# Ban an IP on one port only (here SSH, incoming only) for 1 hour:
seclayer -td 203.0.113.88 3600 -p 22 -d in "SSH brute force"
# Temporarily allow an IP for 30 minutes (1800 seconds):
seclayer -ta 192.0.2.25 1800 "Admin access"
# Remove a temporary ban or temporary allow:
seclayer -tr 203.0.113.88
seclayer -tr 203.0.113.88 -p 22
seclayer -tar 192.0.2.25
# List all active temporary entries:
seclayer -t