# THIS FILE IS CONTROLLED BY PUPPET debug off block unknown-users allow_missing_dns no allow_missing_reverse no allow localhost allow 127.0.0.0/8 allow 10.0.0.0/8 db /var/lib/pam_shield/db trigger_cmd /usr/sbin/shield-trigger max_conns 5 interval 3m retention 2h