[DEFAULT]
ignoreip = 127.0.0.1/8
maxretry = 10
findtime = 600
bantime  = 600
backend  = auto
usedns   = warn
destemail = root
filter   = %(__name__)s
protocol = tcp
chain    = INPUT
action   = iptables-ipset-proto6[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s", bantime="%(bantime)s"]
           sendmail-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]

[sshd]
enabled  = true
mode     = aggressive
port     = ssh
logpath  = /var/log/auth.log
maxretry = 5

[recidive]
enabled  = true
logpath  = /var/log/fail2ban.log
bantime  = 604800  ; 1 week
findtime = 86400   ; 1 day
maxretry = 8
action   = iptables-ipset-proto6-allports[name=%(__name__)s, chain="%(chain)s", bantime="%(bantime)s"]
           sendmail-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]
