[DEFAULT] # Ban hosts for one hour: ignoreip = 127.0.0.1/8 bantime = 86400 findtime = 600 maxretry = 10 # Override /etc/fail2ban/jail.d/00-firewalld.conf: # if you use iptables firewall use this one # banaction = iptables-multiport # if you use firewalld firewall use this one # banaction = firewallcmd-ipset # action = %(action_mwl)s [sshd-22] enabled = true filter = sshd port = 22 # action = %(action_mwl)s # logpath = /var/log/secure [sshd-2263] enabled = true filter = sshd port = 2263