Am Sonntag, dem 17.10.2021 um 13:33 -0400 schrieb Krzysztof Adamski:
>
> ... dovecot: imap-login: Disconnected (auth failed, 4 attempts in 53
> secs): user=<finance@ ...
>
> What I was thinking is that "4 attempts" should be counted as 4
> instead of as 1.
Hello Krzysztof!
I suggest a different solution: Configure logging of dovecot.
/etc/dovecot/10-logging.conf has lots of settings to try. 1 line of
log for 4 failed attempts is a little sparse, methinks!
Cheers,
tim
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
