fail2ban, ssh and etc upstream config updates