@Matthew I think your suggestion of adding the IP to the blacklist automatically when detected by the IDS twice in a 30 day period, but believe this would require some longer term storage of the IDS list contents and may or may not be something we can implement. Only one way to find out though! I'll get a feature request submitted on this for you and we can go from there. Have a good one!
Kyle Kerst
System/Network Administrator
SmarterTools Inc.
(877) 357-6278
www.smartertools.com