jail.local

# Sample jail.local config
[DEFAULT]

ignoreip = 127.0.0.1/24
bantime = 86400
findtime = 300
maxretry = 3
banaction = iptables-multiport
backend = systemd
# Action to ban using IP tables and send telegram notification
action_tg = %(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
            telegram[name=%(__name__)s]
# Choose default action.
action = %(action_tg)s
# if you are going to use ufw
# action = ufw %(action_tg)s

# SSH jail
[sshd]

enabled = tru
port    = 22
logpath = /var/log/auth.log
backend = %(sshd_backend)s
filter = sshd
maxretry = 3
bantime = -1


# Apache2 auth jail
[apache-auth]

enabled = true
port     = http,https
logpath  = /var/log/apache2/error.log
filter = apache-auth
maxretry = 3

# Apache2 pass jail
[apache-pass]

enabled = true
port    = http,https
logpath  = /var/log/apache2/access.log
filter = apache-pass
maxretry = 3