[DEFAULT]
banaction = nftables-multiport
backend   = auto
findtime  = 10m
bantime   = 30m
maxretry  = 3
bantime.increment = false
bantime.factor = 1
bantime.maxtime = 24h
mode = aggressive

[sshd]
enabled = true
port = 2522
filter = sshd
logpath = /var/log/auth.log
action  = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="tcp"]