I was looking on the internet for some nice sshguard improvements, and found this nice:
#!/bin/sh
BACKEND='/usr/libexec/sshg-fw-nft-sets'
FILES='/var/log/messages'
THRESHOLD=2
BLOCKTIME=60480
DETECTION_TIME=60480
WHITELIST_FILE=/etc/sshguard/whitelist
BLACKLIST_FILE=20:/etc/sshguard/blacklist.db
IPV4_SUBNET=24
Whitelist should look something like this:
69.96.138.0/24
127.0.0.0/8
70.143.132.81/32
2100:1600:1850:88ff::64
This is for both ipv6 and ipv4