[ssh-iptables]
backend  = systemd
enabled  = true
filter   = sshd
action   = iptables[name=SSH, port=ssh, protocol=tcp]
logpath  = /var/log/secure
maxretry = 2
bantime  = 2h