[DEFAULT] bantime=3600 ignoreip=127.0.0.11/8 [sshd] enabled=true port=ssh bantime=600 maxretry=1 [postfix-sasl] enabled=true port=smtp,465,submission,imap,imaps,pop3,pop3s bantime=600 maxretry=1 [ssh-ddos] enabled=true port=ssh,sftp bantime=600 maxretry=1 filter=sshd[mode=ddos] [webmin-auth] enabled=true port=10000 bantime=600 maxretry=5 [proftpd] enabled=true port=ftp,ftp-data,ftps,ftps-data bantime=600 maxretry=1 [postfix] enabled=true port=smtp,465,submission bantime=600 maxretry=1 [dovecot] enabled=true port=pop3,pop3s,imap,imaps,submission,465,sieve bantime=600 maxretry=1 [recidive] enabled=true bantime=18144000 ; 1 month findtime=1d maxretry=3