<![CDATA[iRedMail — Fail2ban not banning IP after repeated IMAP login failures]]> https://forum.iredmail.org/topic21122-fail2ban-not-banning-ip-after-repeated-imap-login-failures.html Mon, 06 Apr 2026 14:03:02 +0000 PunBB <![CDATA[Re: Fail2ban not banning IP after repeated IMAP login failures]]> https://forum.iredmail.org/post91858.html#p91858 What are the related log lines in Fail2ban log file (/var/log/fail2ban.log or /var/log/fail2ban/fail2ban.log)?

]]> Mon, 06 Apr 2026 14:03:02 +0000 https://forum.iredmail.org/post91858.html#p91858 <![CDATA[Fail2ban not banning IP after repeated IMAP login failures]]> https://forum.iredmail.org/post91857.html#p91857 Hi all,

I'm running iRedMail (Ubuntu 22.04, iRedMail 1.6.x) with Fail2ban enabled by default. I noticed that after multiple failed IMAP login attempts (tested via Thunderbird), my IP is not getting banned as expected.

I checked jail.local and confirmed that the dovecot jail is enabled, and the logs do show repeated login failures. It seems like Fail2ban is detecting the events but not actually banning the IP.

Is there any additional configuration needed for Dovecot with iRedMail (e.g., custom filter, log backend, or different log path)?

Thanks!

]]> Mon, 06 Apr 2026 07:17:16 +0000 https://forum.iredmail.org/post91857.html#p91857