Actually ddos-protection does not allow to modify ban_time on fastnetmon configuration which has a default values of 1900 seconds. This should be configurable for flexible policies.

A pull request has been made: https://github.com/vyos/vyos-1x/pull/1422