On 2023-04-29 16:56, Jim Wright wrote: > All of my configs files are stock, except for jail.local. > Pasting the relevant section for that as well. > I really do not see where the stock dovecot failregex detects "unknown user," or "sql()" to collect the IP address.
You could try adding the following to the failregex: ^.*auth-worker.* sql\(support,<HOST>\)\: unknown user -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
