[DEFAULT] ignoreip = 127.0.0.1/8 ::1 bantime = 1h findtime = 10m maxretry = 5 backend = systemd [sshd] enabled = true port = ssh logpath = %(sshd_log)s maxretry = 5 [sshd-ddos] enabled = true port = ssh logpath = %(sshd_log)s maxretry = 3