File sshguard.sysconfig of Package sshguard
## Path: Network/Firewall/SSHGuard
## Description: SSHGuard configuration
## ServiceRestart: sshguard
## Type: string
## Default: ""
# Whitespace separated list of logfiles which will be
# monitored from SSHGUARD for break in attempts.
MONITORED_LOGS="/var/log/sshguard-journal-tail"
## Type: string
## Default: "22"
# Protected TCP ports/services
# comma separated
PORTS="22"
## Type: integer
## Default: 40
# Attack threshold before IP gets blocked, one attempt is 10
ATTACK_TRESHOLD="40"
## Type: integer
## Default: 420
# Seconds until a blocked IP gets removed
RELEASE_TIMEOUT="420"
## Type: integer
## Default: 1200
# Seconds until a IP is "cleared"
FORGET_TIMEOUT="1200"
## Type: string
## Default: "/etc/sshguard/whitelist"
# see man page for format
WHITELIST="/etc/sshguard/whitelist"
## Type: string
## Default: "100:/var/lib/sshguard/db/blacklist.db"
# see man page for format
BLACKLIST="100:/var/lib/sshguard/db/blacklist.db"