pfSense

*/60 * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout

*/60 checks every 60 minutes if the time of that rule has expired.
if i have 59 minutes blocked when cron runs, it will take another 60 minutes to next check.
total time blocked 119 minutes

changing the rule to every minute(or every 3 minutes on large systems)

• * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout*
  cron will reache blocked rule on time "-t 3600" and will unlock blocked ip.

same for
*/60 * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot