[DEFAULT] chain = input maxretry = 3 findtime = 60m bantime = 24h backend = systemd logtarget = SYSTEMD-JOURNAL banaction = nftables-multiport banaction_allports = nftables-allports [sshd] enabled = true port = 1738 mode = aggressive journalmatch=_SYSTEMD_UNIT=ssh.service