[openvpn]
enabled  = true
backend  = auto
filter   = openvpn
# Adapter le chemin selon la config OpenVPN (log ou log-append)
logpath  = /var/log/openvpn/openvpn.log
           /var/log/openvpn.log
port     = 41194
protocol = udp
# Bannir tous les ports (pas seulement VPN) car la menace est globale
banaction = f2b-iptables-allports
maxretry = 3
findtime = 5m
bantime  = 24h