If an attack is "re-published" to FNM the attack UUID updates.
The action button to remove the block still has a record of the old attack UUID.
There should be a failsafe method to see if there is an existing rule for this IP address and then remove the block.
This probably should only apply to rules which are completely identical (and if it could be made to work with flowspec rules would also solve the flowspec uuid inaccurate issue)
If an attack is "re-published" to FNM the attack UUID updates.
The action button to remove the block still has a record of the old attack UUID.
There should be a failsafe method to see if there is an existing rule for this IP address and then remove the block.
This probably should only apply to rules which are completely identical (and if it could be made to work with flowspec rules would also solve the flowspec uuid inaccurate issue)