<![CDATA[iRedMail — Fail2ban not banning IP after repeated IMAP login failures]]> 2026-04-06T14:03:02Z PunBB https://forum.iredmail.org/topic21122-fail2ban-not-banning-ip-after-repeated-imap-login-failures.html <![CDATA[Re: Fail2ban not banning IP after repeated IMAP login failures]]> What are the related log lines in Fail2ban log file (/var/log/fail2ban.log or /var/log/fail2ban/fail2ban.log)?

]]> https://forum.iredmail.org/user2.html 2026-04-06T14:03:02Z https://forum.iredmail.org/post91858.html#p91858 <![CDATA[Fail2ban not banning IP after repeated IMAP login failures]]> Hi all,

I'm running iRedMail (Ubuntu 22.04, iRedMail 1.6.x) with Fail2ban enabled by default. I noticed that after multiple failed IMAP login attempts (tested via Thunderbird), my IP is not getting banned as expected.

I checked jail.local and confirmed that the dovecot jail is enabled, and the logs do show repeated login failures. It seems like Fail2ban is detecting the events but not actually banning the IP.

Is there any additional configuration needed for Dovecot with iRedMail (e.g., custom filter, log backend, or different log path)?

Thanks!

]]> https://forum.iredmail.org/user156549.html 2026-04-06T07:17:16Z https://forum.iredmail.org/post91857.html#p91857