I found the solution... I had to set:
# Log unsuccessful authentication attempts and the reasons why they failed. auth_verbose = yes in /etc/dovecot/conf.d/10-log.conf, after which dovecot individually logs all authentication failures in (near-)realtime without waiting for the connection to terminate, allow fail2ban to count the failed lines. Thanks for being my rubber ducky. Cheers, Gary T. Giesen _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
