Adaptive Firewall Rules with afctl
Someone finally turned me on to the afctl program and I was thrilled. I quickly made a script on my site that will automatically block abusers for an hour. Once I turned this script on, my server's cpu dropped to near idle while it continued to pump out tens of thousands of legit page views per day. I was very happy.
BUT now I have a big problem. afctl generated temporary firewall rules start at 01700 and increment by 5 with every new rule. Well after about 4 days of running this script, my rule numbers have gotten up to and past number 12300, which is the range of a bunch of the default firewall rules. afctl is now making rules with higher numbers than this (meaning they come after them) and the afctl rules now don't DO anything.
Server Admin doesn't even let you delete these afctl created rules. Is there some way I can manage these rules? Ideally, the best way to have it run is to have it pick the lowest available rule number higher than 01700. That way I would have to have over 10,000 rules at once for me to have any conflicts. Normally I only have 30-50 rules at once, maybe a few more during heavy traffic.
Does anybody have any insight on this matter?