fail2ban conf

jail.local

[sshd]
enabled = true

#call iptables to ban IP address
banaction = iptables-multiport
#ban on all ports
banaction_allports = iptables-allports

bantime  = 31536000 #this is one year ban time
#bantime  = -1 this will ban permanently

# A host is banned if it has generated "maxretry" during the last "findtime"
findtime  = 5m

# "maxretry" is the number of failures before a host get banned.
maxretry = 3

#whitelist your ip address by comma seperated.
ignoreip = 127.0.0.1


#user will be banned for 1 year if it fails auth 3 times in last 5 minutes.