[DEFAULT]
ignoreip = 127.0.0.1/8 ::1

findtime = 600
maxretry = 5
bantime  = 1h

backend   = systemd
banaction = nftables[type=multiport]

[sshd]
enabled  = true
port     = 25105
filter   = sshd
maxretry = 5
findtime = 600
bantime  = 1h
mode     = aggressive