chd-stg1:/etc/fail2ban# cat jail.conf [DEFAULT] ignoreip = 127.0.0.1/8 ignorecommand = bantime = 600 # A host is banned if it has generated "maxretry" during the last "findtime" seconds. findtime = 600 maxretry = 3 backend = auto usedns = warn destemail = root@localhost sendername = Fail2Ban sender = fail2ban@localhost # # JAILS # [pam-generic] enabled = true filter = pam-generic action = route logpath = /var/log/auth.log maxretry = 6 [ssh-route] enabled = true filter = sshd action = route logpath = /var/log/auth.log maxretry = 6