Continuation of the old thread topic:
"Fail2ban replacement and RBL firewall sync'ing - in lightweight ash" https://forum.archive.openwrt.org/viewtopic.php?id=62084
Fail2ban functionality for weaker routers, makes upgrade to latest OpenWRT-s 22.03++ possible without losing ssh-brute-force protection. Code length growth +2.5%. Not to be considered stable (beta). Testers welcome.
Package source: https://github.com/marjancinober/bearDropper , forked from https://github.com/robzr/bearDropper and ported for OpenWRT 22.03.+ nftables.