fail2ban + firewalld suggestions needed