Starting on fail2ban states.
Use jail.local to enable additional jails.
Enable fail2ban whenever SSHD is configured.