fail2ban/config/filter.d/sogo-auth.conf

# /etc/fail2ban/filter.d/sogo-auth.conf
#
# Fail2Ban configuration file
# By Arnd Brandes
# SOGo
#

[Definition]
# Option: failregex
# Filter Ban in /var/log/sogo/sogo.log
# Note: the error log may contain multiple hosts, whereas the first one 
# is the client and all others are poxys. We match the first one, only

failregex = Login from '<HOST>' for user '.*' might not have worked( - password policy: \d*  grace: -?\d*  expire: -?\d*  bound: -?\d*)?\s*$

# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =
Update config/filter.d/sogo-auth.conf Comment line in the top altered to fit file name. My local file was named differently... 12 years ago			`# /etc/fail2ban/filter.d/sogo-auth.conf`
Create sogo-auth.conf Regexp works with SOGo 2.0.5 or newer, following new feature implemented here: http://www.sogo.nu/bugs/view.php?id=2229 12 years ago			`#`
			`# Fail2Ban configuration file`
			`# By Arnd Brandes`
			`# SOGo`
			`#`

			`[Definition]`
			`# Option: failregex`
			`# Filter Ban in /var/log/sogo/sogo.log`
			`# Note: the error log may contain multiple hosts, whereas the first one`
			`# is the client and all others are poxys. We match the first one, only`

ENH: Slight tune ups for fresh SOGo filter + comment into the sample log file 12 years ago			`failregex = Login from '<HOST>' for user '.' might not have worked( - password policy: \d grace: -?\d* expire: -?\d* bound: -?\d)?\s$`
Create sogo-auth.conf Regexp works with SOGo 2.0.5 or newer, following new feature implemented here: http://www.sogo.nu/bugs/view.php?id=2229 12 years ago
			`# Option: ignoreregex`
			`# Notes.: regex to ignore. If this regex matches, the line is ignored.`
			`# Values: TEXT`
			`#`
Update sogo-auth.conf included hint by user yarikoptic 12 years ago			`ignoreregex =`