Any way to block traffic on specific port only?

[NF_Zac]

Is there a way to create a block rule, or any way to set it up to auto block based on the port? For example if a customer fails SMTP auth 15 times, can it just block them on port 25? Or if they fail an HTTP authentication X times it blocks them on port 80 only?

Also how about rules just being created for deny, why do we need deny and denyout for every block on an IP created.

Thank for the help/response/input.

[marcele]

NF_Zac look at the LF_SELECT option in csf.conf