fail2ban setup centos 7 not picking auth fail?

[Adi Pircalabu]

On 22-05-2020 10:38, Voytek Eymont wrote:
> I'm trying to set up fail2ban with dovecot, I have it working on 'old'
> server Centos 6, but, not getting anywhere with 'new' server on Centos 
> 7
> using standard filters
> 
> I've copied same 'filter' to new server, still get nothing
> any idea how to figure this out ?
> 
> on old server, it logs to syslog/messages
> CentOS release 6.10 (Final) dovecot 2.3.10.1 (a3d0e1171)
> 
> old # fail2ban-client status dovecot
> Status for the jail: dovecot
> |- Filter
> |  |- Currently failed: 2
> |  |- Total failed:     168
> |  `- File list:        /var/log/dovecot.log
> `- Actions
>    |- Currently banned: 0
>    |- Total banned:     32
>    `- Banned IP list:
> 
> on new server CentOS Linux release 7.8.2003 dovecot 2.3.10.1 
> (a3d0e1171)
> nothing shows up in fail2ban log (ssh, postfix does, only no dovecot)
> I've copied the actual /etc/fail2ban/filter.d/dovecot.conf from old
> server, still nothing
> not sure where/how to look
> is there a standard/approved doveot filter..?

Hardly a Dovecot issue. Can you please post the output of this command?
/usr/bin/fail2ban-regex /var/log/dovecot.log 
/etc/fail2ban/filter.d/dovecot.conf

-- 
Adi Pircalabu