########################################
### /etc/fail2ban/filter.d/sasl.conf ###
########################################
[INCLUDES]
before = common.conf

[Definition]
failregex =     ^.*postfix/smtpd.*: warning: .*\[<HOST>\]: SASL LOGIN authentication failed.*
                ^.*postfix/submission/smtpd.*: warning: .*\[<HOST>\]: SASL LOGIN authentication failed.*
ignoreregex =



################################
### /etc/fail2ban/jail.local ###
################################
[sasl]
enabled = true
port    = smtp,submission,imap2,imap3,imaps,pop3,pop3s
logpath = /var/log/maillog
filter  = sasl
maxretry = 1