[main] includes = ${CMAKE_INSTALL_FULL_SYSCONFDIR}/f2b/conf-enabled pidfile = /var/run/f2b.pid statedir = ${CMAKE_INSTALL_FULL_LOCALSTATEDIR}/lib/f2b logdest = syslog loglevel = info logfile = /var/log/f2b.log user = root group = root daemon = yes coredumps = no nice = 0 [defaults] state = no enabled = no bantime = 3600 findtime = 300 expiretime = 14400 bantime_extend = 0.2 findtime_extend = 0.07 banscore = 50 backend = exec-ipset:banned [csocket] listen = unix:/var/run/f2b.sock ;listen = inet:localhost ;listen = inet:192.168.1.1 ;listen = inet:[::1]:12345 ; auth used only for 'inet' connections ; if password not set - it will be generated on each restart, see logs ;password = [jail:ssh] source = files:/var/log/auth.log filter = preg:${CMAKE_INSTALL_FULL_DATAROOTDIR}/f2b/filters/ssh.preg