U can enable in fail2ban jail conf. /etc/fail2ban/jail.conf U can make a copy to jail.local and edit that, then will not overwrited by update.