[sshd] enabled = true port = XXXX filter = sshd logpath = /var/log/auth.log maxretry = 3 bantime = 24h findtime = 1h