[ssh-iptables] enabled = true filter = sshd action = iptables[name=SSH, port=ssh, protocol=tcp] sendmail-whois[name=SSH, dest=mail@example.com, sender=mail@example.com] logpath = /var/log/messages maxretry = 5