[DEFAULT]
ignoreip = 127.0.0.1/8 ::1 123.123.123.123 192.168.1.0/24 10.0.0.0/8
bantime = 24h
maxretry = 3
findtime = 2h

[sshd]
mode=aggressive