[DEFAULT] # Ban hosts for one hour: ignoreip = 127.0.0.1/8 bantime = 86400 findtime = 7200 maxretry = 5 # Override /etc/fail2ban/jail.d/00-firewalld.conf: # if you use iptables firewall use this one # banaction = iptables-multiport # if you use firewalld firewall use this one # banaction = firewallcmd-ipset # action = %(action_mwl)s [sshd] enabled = true filter = sshd port = 22, 2263 # action = %(action_mwl)s # logpath = /var/log/secure