---
title: 'sshguard improvements'
url: 'https://grav.munn.me/my-blog/sshguard-improvements'
markdown: 'https://grav.munn.me/my-blog/sshguard-improvements.md'
date: '2025-08-13'
description: "I was looking on the internet for some nice sshguard improvements, and found this nice: #!/bin/sh BACKEND='/usr/libexec/sshg-fw-nft-sets' FILES='/var/log/messages' THRESHOLD=2 BLOCKTIME=60480 DETECTION_TIME=60480 WHITELIST_FILE=/etc/sshguard/whitelist BLACKLIST_FILE=20:/etc/sshguard/blacklist.db IP…"
---

# sshguard improvements

I was looking on the internet for some nice sshguard improvements, and found this nice:

```ini
#!/bin/sh
BACKEND='/usr/libexec/sshg-fw-nft-sets'
FILES='/var/log/messages'
THRESHOLD=2
BLOCKTIME=60480
DETECTION_TIME=60480
WHITELIST_FILE=/etc/sshguard/whitelist
BLACKLIST_FILE=20:/etc/sshguard/blacklist.db
IPV4_SUBNET=24
```

Whitelist should look something like this:

```ini
69.96.138.0/24
127.0.0.0/8
70.143.132.81/32
2100:1600:1850:88ff::64
```

This is for both ipv6 and ipv4

---

## Navigation

- Parent: [My Blog](https://grav.munn.me/my-blog.md)
- Previous: [Some musings and general thoughts this week](https://grav.munn.me/my-blog/some-musings-and-general-thoughts-this-week.md)
- Next: [Steelcase Ology Sadness 💩 and Fosdem is MUCH better virtually!](https://grav.munn.me/my-blog/steelcase-ology-sadness-and-fosdem-is-much-better-virtually.md)