slightly tweaked fail2ban banaction to iptables-allports to hopefully waste a few less cycles checking port numbers on packets from banned peers