Where to find the list of Fail2Ban built-in port bindings?

Question

I am setting up a fail2ban instance, everything works fine as expected, but I have been noticing some rules has built-in ports, for example:

...

[domino-smtp]
port    = smtp,ssmtp
logpath = /home/domino01/data/IBM_TECHNICAL_SUPPORT/console.log

...

filter = sshd
logpath = /var/log/auth.log
port = ssh

...

[phpmyadmin-syslog]
port    = http,https
logpath = %(syslog_authpriv)s
backend = %(syslog_backend)s

...

So, when it states that port is ssh or http or whatever, where do fail2ban get these bindings from? How do I know what ports can I use as names and which as just port numbers?

Answer 1

Named ports are used by many tools besides f2b. In most Linux distributions they are defined in /etc/services (a subset of IANA's official list).