root
36 lines
505 B
Plaintext
36 lines
505 B
Plaintext
[DEFAULT]
|
|
ignoreip = 127.0.0.1/8 ::1
|
|
bantime = 1h
|
|
findtime = 10m
|
|
maxretry = 5
|
|
backend = systemd
|
|
banaction = ufw
|
|
banaction_allports = ufw
|
|
|
|
action = %(action_mwl)s
|
|
|
|
[sshd]
|
|
enabled = true
|
|
mode = aggressive
|
|
port = ssh
|
|
logpath = %(sshd_log)s
|
|
maxretry = 4
|
|
findtime = 10m
|
|
bantime = 4h
|
|
|
|
[sshd-ddos]
|
|
enabled = true
|
|
port = ssh
|
|
logpath = %(sshd_log)s
|
|
maxretry = 3
|
|
findtime = 10m
|
|
bantime = 8h
|
|
|
|
[recidive]
|
|
enabled = true
|
|
logpath = /var/log/fail2ban.log
|
|
banaction = ufw-allports
|
|
findtime = 1d
|
|
bantime = 7d
|
|
maxretry = 5
|