[Dovecot] Fail2Ban and the Dovecot log

[Timo Sirainen]

On Sun, 2009-05-17 at 15:28 -0400, Lou Duchez wrote:
> > Yeah. I don't know what I was thinking when I made it work like that.
> >   
> I know what you were thinking: if dovecot is writing to a log such as 
> "mylogfile.log", and other utilities are also writing to 
> "mylogfile.log", it's good to know which lines are dovecot.

I think it's a bit unlikely use case. Also seems like a bad idea to
combine logs in that way. :) There is anyway still some kind of a prefix
always, such as:

May 17 17:19:52 dovecot: Info: Dovecot v1.2.rc3 starting up
May 17 17:19:52 auth(default): Info: passwd-file /usr/local/etc/passwd.imap: Read 4 users

> But I am satisfied with using syslog logging; it just should be recorded 
> somewhere that syslog is required for compatibility with Fail2Ban. I 
> tried to edit wiki.dovecot.org with this information, but was too 
> incompetent to figure out how to add a page. 

You can just write the page name to the URL and then click "Create this
page" link. Anyway I added it: http://wiki.dovecot.org/HowTo/Fail2Ban

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20090517/282e8223/attachment.bin