2007/6/28, J.D. Bronson <jbronson@sixcompanies.com>:
quoted text
> so if it wont write to a file...I presume it blocks
> whats listed in /etc/tables/scanners permanently and then only
> blocks NEW offenders via kernel memory?
> (can someone clarify my understanding of that?

Do you really need a file? In my experience blocking the offenders for
1h is enough; they very rarely come back later.

Best
   Martin