---
fail2ban_rhel_jail_sshd:
  enabled: true
  port: ssh
  findtime: 600
  maxretry: 5
  bantime: 3600
  logpath: "%(sshd_log)s"
  backend: "%(sshd_backend)s"
  banaction: firewallcmd-multiport
  ignoreips:
    - 127.0.0.1/8
    - ::1