Package: fail2ban Version: 0.9.6-1 Severity: normal Dear Maintainer,
activating the dovecot jail I didn't see any bans. I then checked which file the auth info is written to, and which is checked. The auth failed messages of dovecot are going into auth.log and not into mail.warn, thus fail2ban does not find any hits. Calling fail2ban-regexp /var/log/auth.log /etc/fail2ban/filter.d/dovecot.conf gives several hits. Thanks Norbert -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Init: systemd (via /run/systemd/system) Versions of packages fail2ban depends on: ii init-system-helpers 1.47 ii lsb-base 9.20161125 pn python3:any <none> Versions of packages fail2ban recommends: ii iptables 1.6.0+snapshot20161117-5 ii python 2.7.13-2 ii python3-pyinotify 0.9.6-1 ii python3-systemd 233-1 ii whois 5.2.14 Versions of packages fail2ban suggests: ii bsd-mailx [mailx] 8.1.2-0.20160123cvs-3 ii monit 1:5.20.0-6 ii rsyslog [system-log-daemon] 8.24.0-1 -- no debconf information