Dear Maintainer,

activating the dovecot jail I didn't see any bans. I then checked
which file the auth info is written to, and which is checked.

The auth failed messages of dovecot are going into auth.log and
not into mail.warn, thus fail2ban does not find any hits.

Calling fail2ban-regexp /var/log/auth.log /etc/fail2ban/filter.d/dovecot.conf
gives several hits.

Thanks

Norbert

Hi,

can confirm this bug with stretch now being stable.
This should be fixed fast as it results in brute-force protection for
Dovecot being inactive.

Workaround is to add the correct logpath into jail.local:
logpath = /var/log/mail.log

(I wouldn't use auth.log, not every fail is logged there.)

Regards

Andreas