[sshd]
enabled = true
port = ssh
filter = sshd
backend = systemd
logpath = journal
maxretry = 3
bantime = 1d
findtime = 10m
action = iptables[name=SSH, port=ssh, protocol=tcp]