summaryrefslogtreecommitdiff
path: root/etc/fail2ban/jail.d/sshd.conf
blob: 35a73c7f63107bda5d21bce1a9977f77624c6dfe (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
[DEFAULT]
# Use UFW to execute IP bans
banaction = ufw

# Read logs directly from systemd journal (required for Arch Linux)
backend = systemd

# Ignore local traffic
ignoreip = 127.0.0.1/8 ::1 192.168.1.0/24

# Ban parameters
findtime = 10m
maxretry = 4
bantime  = 1h

[sshd]
enabled = true
port    = 39901
mode    = normal