From 486480ab15ca83a971d8d0eb398ed474c846a952 Mon Sep 17 00:00:00 2001
From: Oliver Ladner <waste@lugh.ch>
Date: Sun, 4 Sep 2011 13:55:03 +0200
Subject: [PATCH] added dovecot filter

---
 dovecot.conf | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 dovecot.conf

diff --git a/dovecot.conf b/dovecot.conf
new file mode 100644
index 0000000..6934a11
--- /dev/null
+++ b/dovecot.conf
@@ -0,0 +1,23 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
+#
+# $Revision: 728 $
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failure messages in the logfile. The
+#          host must be matched by a group named "host". The tag "<HOST>" can
+#          be used for standard IP/hostname matching and is only an alias for
+#          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
+# Values:  TEXT
+#
+failregex = dovecot: auth-worker\(default\): sql\(.*@.*,<HOST>\): Password mismatch
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex =