Hi stephdl,
Thanks for your answer. Sounds like a perfect solution, however when I enable dynamic ban time in the GUI, the slider to set ban time disappears and the info icons shows:
which lead me to believe that i cannot change the ban time. Am I missing something ?
Sorry if that is a ignorant question, I’m still discovering NS8.
oups you are right 
you cannot customize in the UI but it could be done by modify a custom file, but the update will remove it
Yep, and when crowdsec is restarted this file is overwritten. So alas….
For now I fear I have to stick to my crappy workaround.
Again thanks for your followup.
you can modify the time by disabling the dynamic ban, set the max time you want, then enable the dynamic time again
[root@ns8-leader ~]# cat /var/lib/nethserver/crowdsec3/state/crowdsec_config/profiles.yaml.local
name: default_ip_remediation#debug: truefilters:
Alert.Remediation == true && Alert.GetScope() == “Ip”decisions:
type: banduration: 600m
we math a (number of ban + 1) * 4 (units of duration_expr comes from duration)
duration_expr: Sprintf(‘%dm’, (GetDecisionsCount(Alert.GetValue()) + 1) * 4)
notifications:
email_default # Set the required email parameters in /etc/crowdsec/notifications/email.yaml before enabling this.
either a hidden feature or a bug I need to fix in the UI
i am fixing it @jos