V8.13.296.2025.10.29

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/9950_hardening_fail2ban.chroot

@@ -46,7 +46,7 @@ dbpurgeage            = 384d
 #                       ff00::/8    - IPv6 multicast (not an unicast host)
 #                       ::/128      - IPv6 unspecified (all zeros; never a real peer)
 ignoreip              = 127.0.0.1/8 ::1/128 fe80::/10 ff00::/8 ::/128 IGNORE_IP_MUST_BE_SET
-usedns		            = yes
+usedns                = yes
 
 [recidive]
 enabled               = true
@@ -61,7 +61,7 @@ bantime.rndtime       = 877s
 filter                = recidive
 findtime              = 16d
 logpath               = /var/log/fail2ban/fail2ban.log*
-maxretry              = 3
+maxretry              = 2
 
 ### SSH Handling:     Foreign IP (not in /etc/hosts.allow): refused to connect: immediate ban [sshd-refused]
 ###                   Jump host mistyped 1-3 times: no ban, only after four attempts          [sshd]