anchor.diff:  # logpath = %(syslog_authpriv)s
   # if you want to rely on PAM failed login attempts
   # vsftpd's failregex should match both of those formats
  +enabled  = <%= scope['::fail2ban::jails'].include? "vsftpd" %>
   port     = ftp,ftp-data,ftps,ftps-data
   logpath  = %(vsftpd_log)s
  +maxretry = 6
   
   
   #
  
positive.code: 
  [apache-auth]
  
  port     = http,https
  logpath  = %(apache_error_log)s
  
  
  [apache-badbots]
  # Ban hosts which agent identifies spammer robots crawling the web
  # for email addresses. The mail outputs are buffered.
  port     = http,https
  logpath  = %(apache_access_log)s
  bantime  = 172800
  
negative.code: # log-error=/var/log/mysqld.log
  [mysqld-auth]
  
  enabled  = <%= scope['::fail2ban::jails'].include? "mysqld-auth" %>
  port     = 3306
  logpath  = %(mysql_log)s
  maxretry = 5
  