ASL has blocked packets from an IP that was shunned by ASL due to a rule violation. By default, these shuns are temporary. You can find out why a shun occurred and remove a shun by following the process in this article:
You can manually remove a shun by following this process:
This capability in ASL is enabled by default, and is controlled by this setting:
Shuns are, by default, automatically removed based on this setting:
The timeout to automatically remove shuns is set by this configuration setting:
Note: These rules are labeled in netfilter with "ASL-ACTIVE-RESPONSE" as the label.