I see fail2ban has options to select the backend monitoring. Gamin, pyinotify, and polling. On OS X, gamin & pyinotify are not options. From what I can find, gamin seems to no longer be developed. OS X uses FS Events (see http://en.wikipedia.org/wiki/FSEvents). Is there any chance fail2ban will expand this capability? As it stands, using polling on my OS X machine, there is a delay between when an attack occurs and when fail2ban blocks the attack. Most of the time it's upwards of a minute or more. This is huge when the attacker is using a brute force attack.