BLOCK CONNECTION & kill connection in active connections
In active connections/active hosts there is currently the option to kill a connection.
Adding a 'Block connection' option would make stopping an unwanted connection much simpler.
Dimitri Vanden Bosch commented
Yes it would be very interesting to be able to add an IP address in a blacklist directly from Active Connections. In the same way as "kill connection" <-> "add blacklist".
It is boring to have to add every time the addresses in a group and to have to kill manually the bad IP.
Pam Kimmonjs commented
Esp at the moment because there is a lot of SMTP traffic that comes in from infected people that goes over the 200 connections limit...but those connections won't drop until I log in, find the IP, add it to a rule that I set up to block all traffic for a specific IP, and then manually kill the connections.
German Ruiz commented
It will be great to blacklist ip´s directly and also the posibility of Geolocate them . When we have an attack, normally we have to geolocate using an external tool, then add the ip to a blacklist, and by last create a rule preventing their connections.
add geoip location of the ip address