fail2ban/config/filter.d/perdition.conf

# Fail2Ban configuration file
#
# Author: Christophe Carles and Daniel Black
#
#

[INCLUDES]

before = common.conf

[Definition]

_daemon=perdition.imaps

failregex = ^%(__prefix_line)sAuth: <HOST>:\d+->(\d{1,3}\.){3}\d{1,3}:\d+ client-secure=\S+ authorisation_id=NONE authentication_id="\S+" server="\S+" protocol=\S+ server-secure=\S+ status="failed: Re-Authentication Failure"$
            ^%(__prefix_line)sFatal Error reading authentication information from client <HOST>:\d+->(\d{1,3}\.){3}\d{1,3}:\d+: Exiting child$