[ssh-iptables] enabled = true filter = sshd action = iptables[name=SSH, port=ssh, protocol=tcp] sendmail-whois[name=SSH, dest=user@myhostname, sender=fail2ban@myhostname] logpath = /var/log/secure maxretry = 3