[sshd]
enabled = true
port = 22
bantime = 10m
maxretry = 3
logpath = /var/log/auth.log

[ssh-ddos]
enabled = true
port    = ssh
filter  = sshd-ddos
logpath  = /var/log/auth.log

[dropbear]
enabled  = true
port     = ssh
bantime  = 10m
maxretry = 3
logpath  = %(dropbear_log)s
backend  = %(dropbear_backend)s


[selinux-ssh]
enabled  = true
port     = ssh
bantime  = 10m
maxretry = 3
logpath  = /var/log/auth.log