[sshd] enabled = true filter = sshd logpath = /var/log/auth.log maxretry = 5 findtime = 600 bantime = 3600