[sshd]
enabled = true
filter = sshd
banaction = iptables
findtime = 1d
allowipv6 = true
maxretry = 4
bantime = 1w
ignoreip = 127.0.0.1/8