[DEFAULT] ignoreip = 127.0.0.1 {{ ansible_default_ipv4.address }} {{ ' '.join(friendly_networks) }} bantime = 86400 destemail = {{ admin_email }} banaction = iptables-multiport action = %(action_)s # JAILS [ssh] enabled = true maxretry = 3 [pam-generic] enabled = true banaction = iptables-allports [ssh-ddos] enabled = true [apache] enabled = true [postfix] enabled = true maxretry = 1 [dovecot-pop3imap] enabled = true filter = dovecot-pop3imap action = iptables-multiport[name=dovecot-pop3imap, port="pop3,imap,993,995", protocol=tcp] logpath = /var/log/mail.log maxretry = 20 findtime = 1200 bantime = 1200