# banaction must be defined for any %(action_*)s shortcut to resolve. [DEFAULT] banaction = iptables-multiport banaction_allports = iptables-allports [sshd] enabled = true mode = normal port = ssh logpath = %(sshd_log)s backend = %(sshd_backend)s ignoreip = ips_whitelist