1

Topic: fail2ban triggered, could it be due to missing dovecot-acl?

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
====

Hello,
CentOS MySQL iRedAdmin-Pro

Fail2ban keeps firing off from one domain's office location.  Clients are MS Outlook (probably version 2013)
Review/examples of dovecot.log where appears Outlook or missing "acl" is issue....



Aug 25 09:46:58 imap-login: Info: Login: user=<email_user_account@some_domain_name.tld>, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, mpid=11410, TLS, session=<Y86P9yIeIAAySeJ2>
Aug 25 09:46:58 imap: Debug: Added userdb setting: plugin/master_user=email_user_account@some_domain_name.tld
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Effective uid=2000, gid=2000, home=/var/vmail/vmail1/some_domain_name.tld/email_user_account/
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Quota root: name=user backend=dict args=:proxy::quotadict
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Quota rule: root=user mailbox=* bytes=4294967296 messages=0
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Quota warning: bytes=3650722201 (85%) messages=0 reverse=no command=quota-warning 85 email_user_account@some_domain_name.tld
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Quota warning: bytes=3865470566 (90%) messages=0 reverse=no command=quota-warning 90 email_user_account@some_domain_name.tld
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Quota warning: bytes=4080218931 (95%) messages=0 reverse=no command=quota-warning 95 email_user_account@some_domain_name.tld
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: dict quota: user=email_user_account@some_domain_name.tld, uri=proxy::quotadict, noenforcing=0
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Namespace : type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/:INDEX=/var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: maildir++: root=/var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir, index=, control=, inbox=/var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir, alt=
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl: initializing backend with data: vfile
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl: acl username = email_user_account@some_domain_name.tld
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl: owner = 1
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: Global ACL directory: (none)
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: Namespace : type=shared, prefix=Shared/%u/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/Shared/%u
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt=
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl: initializing backend with data: vfile
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl: acl username = email_user_account@some_domain_name.tld
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl: owner = 0
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: Global ACL directory: (none)
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found
^C

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: fail2ban triggered, could it be due to missing dovecot-acl?

pbf343 wrote:

Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found

This error is safe to ignore, and fail2ban doesn't check this.

If your client uses a static ip address, you can add this ip in file /etc/fail2ban/jail.local, parameter 'ignoreip ='.

3

Re: fail2ban triggered, could it be due to missing dovecot-acl?

ZhangHuangbin wrote:
pbf343 wrote:

Aug 25 09:46:58 imap(email_user_account@some_domain_name.tld): Debug: acl vfile: file /var/vmail/vmail1/some_domain_name.tld/email_user_account//Maildir/.some_folder/dovecot-acl not found

This error is safe to ignore, and fail2ban doesn't check this.

If your client uses a static ip address, you can add this ip in file /etc/fail2ban/jail.local, parameter 'ignoreip ='.

Thank you but it is not static and the client is triggering the fail2ban every day.  How do I determine the cause of the lock?

On another note, even if "safe to ignore," why ignore the issue instead of correcting the problem?   If for no other reason than to have less logging for better system maintenance.

4

Re: fail2ban triggered, could it be due to missing dovecot-acl?

pbf343 wrote:

Thank you but it is not static and the client is triggering the fail2ban every day.  How do I determine the cause of the lock?

If some IP was blocked, you can find it in output of command "iptables -L -n", it will show you the chain name like 'fail2ban-postfix'. That means it's caused by smtp client related errors like password failures (or other errors), so you need to check Postfix (SMTP server) log file to figure it out.

pbf343 wrote:

On another note, even if "safe to ignore," why ignore the issue instead of correcting the problem?   If for no other reason than to have less logging for better system maintenance.

Dovecot tries to find a file which stores ACL setting, but it doesn't exist, so it moves ahead. This is not a error at all, please don't struggle on this.

5 (edited by pbf343 2015-08-28 21:09:13)

Re: fail2ban triggered, could it be due to missing dovecot-acl?

So the offending IP appears to be related to dovecot.

Chain fail2ban-dovecot (1 references)
REJECT     all  --  x.x.x.x        0.0.0.0/0           reject-with icmp-port-unreachable

6 (edited by pbf343 2015-08-28 22:15:25)

Re: fail2ban triggered, could it be due to missing dovecot-acl?

What is the time difference between a series of log entries and fail2ban locking down an IP?

7

Re: fail2ban triggered, could it be due to missing dovecot-acl?

pbf343 wrote:

What is the time difference between a series of log entries and fail2ban locking down an IP?

Sorry, i don't quite understand this question.

I suggest you check /etc/fail2ban/jail.local first. don't be lazy tongue

8 (edited by pbf343 2015-08-29 20:02:01)

Re: fail2ban triggered, could it be due to missing dovecot-acl?

ZhangHuangbin wrote:
pbf343 wrote:

What is the time difference between a series of log entries and fail2ban locking down an IP?

Sorry, i don't quite understand this question.

I suggest you check /etc/fail2ban/jail.local first. don't be lazy tongue

Not trying too... More of a question like a test as to being right or wrong in understanding scenarios. 

In iRedAdmin-Pro configuration...   The fail2ban software scans the log files for matched criteria.  Obviously, if it is heavily used server, scans may take longer.   What are some practical values it should take in the amount of time that the scan would adjust the firewall.  Example: scans the dovecot.log.  The log has several days entry from previous rotation.  If log shows a failed access at 7:00 am.  What is the reasonable amount of time before the block is inserted into the firewall. 

I ask because I see some values that may be causing the block.  However, the time between the log entry and block makes me curious if the cause is accurate in my understanding.  The real example: 


Aug 28 07:06:20 imap-login: Info: Login: user=<matt@domains_name.tld>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y, mpid=32742, TLS, session=<J4DZEl0edAAySeJ2>

Aug 28 07:12:35 imap-login: Info: Aborted login (auth failed, 1 attempts in 2 secs): user=<steve@domains_name.tld>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y, TLS, session=<0SoYKV0eaAAySeJ2>

Aug 28 07:12:37 imap-login: Info: Login: user=<steve@domains_name.tld>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y, mpid=543, TLS, session=<2lgYKV0eaQAySeJ2>


Chain fail2ban-dovecot (1 references)
target     prot opt source               destination
REJECT     all  --  x.x.x.x        0.0.0.0/0 reject-with icmp-port-unreachable

So at 7:12 Steve's account has Aborted login.
Steve then reports being locked out about 7:28 via another email through mobile device. 

Is the Aug 28 07:12:35 imap-login item the issue or am I wrong in thinking this is the cause?

9

Re: fail2ban triggered, could it be due to missing dovecot-acl?

I suggest you check /etc/fail2ban/jail.local to see which filters are enabled, then check the filter files under /etc/fail2ban/filter.d/, you will see what logs Fail2ban extracts.

10 (edited by pbf343 2015-08-31 22:40:05)

Re: fail2ban triggered, could it be due to missing dovecot-acl?

Not sure what you mean by "extracts."   Can you explain more? 

You make one assumption that someone knows "regular expressions" which may not be the case.  Even if one spent several hours/days studying regular expressions to initially solve such a problem, regular expressions are as much an "art" as they are a science; in that lots of experience makes a difference, not even counting the mistakes a newbie will make...   


Excluded a couple of IPs in the ignore IP values in the jail.conf.

On another note, obviously a lot of files in the directory:
    /etc/fail2ban/filter.d/

I'm thinking of Dovecot but could be totally wrong.... That said the info related to Dovecot.







jail.local
-----
# "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not
# # ban a host which matches an address in this list. Several addresses can be
# # defined using space separator.
# ignoreip = 127.0.0.1/8
#
#

# Refer to /etc/fail2ban/jail.conf for more examples.
[DEFAULT]
# time is in seconds. 3600 = 1 hour, 86400 = 24 hours (1 day)
findtime    = 3600
bantime     = 86400
maxretry    = 5
ignoreip    = 127.0.0.1 127.0.0.0/8

[sshd]
enabled     = true
filter      = sshd
action      = iptables-allports
logpath     = /var/log/secure

[sshd-ddos]
enabled     = true
filter      = sshd-ddos
action      = iptables-allports
logpath     = /var/log/secure

[roundcube-iredmail]
enabled     = true
filter      = roundcube.iredmail
action      = iptables-multiport[name=roundcube, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath     = /var/log/maillog
findtime    = 3600

[dovecot-iredmail]
enabled     = true
filter      = dovecot.iredmail
action      = iptables-multiport[name=dovecot, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath     = /var/log/dovecot.log

[postfix-iredmail]
enabled     = true
filter      = postfix.iredmail
action      = iptables-multiport[name=postfix, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
#              sendmail[name=Postfix, dest=root, sender=fail2ban@localhost]
logpath     = /var/log/maillog

[sogo-iredmail]
enabled     = true
filter      = sogo-auth
action      = iptables-multiport[name=SOGo, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath     = /var/log/sogo/sogo.log
-----





cat /etc/fail2ban/filter.d/dovecot.iredmail.conf
[Definition]
failregex = Authentication failure.* rip=<HOST>
            Aborted login \(no auth attempts in .* rip=<HOST>
            Aborted login \(auth failed.* rip=<HOST>
            Aborted login \(tried to use disallowed .* rip=<HOST>
            Aborted login \(tried to use disabled .* rip=<HOST>

ignoreregex =

-----------------

cat /etc/fail2ban/filter.d/dovecot.conf
# Fail2Ban filter Dovecot authentication and pop3/imap server
#

[INCLUDES]

before = common.conf

[Definition]

_daemon = (auth|dovecot(-auth)?|auth-worker)

failregex = ^%(__prefix_line)s(pam_unix(\(dovecot:auth\))?:)?\s+authentication failure; logname=\S* uid=\S* euid=\S* tty=dovecot ruser=\S* rhost=<HOST>(\s+user=\S*)?\s*$
            ^%(__prefix_line)s(pop3|imap)-login: (Info: )?(Aborted login|Disconnected)(: Inactivity)? \(((auth failed, \d+ attempts)( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)\):( user=<\S*>,)?( method=\S+,)? rip=<HOST>(, lip=(\d{1,3}\.){3}\d{1,3})?(, TLS( handshaking(: SSL_accept\(\) failed: error:[\dA-F]+:SSL routines:[TLS\d]+_GET_CLIENT_HELLO:unknown protocol)?)?(: Disconnected)?)?(, session=<\S+>)?\s*$
            ^%(__prefix_line)s(Info|dovecot: auth\(default\)): pam\(\S+,<HOST>\): pam_authenticate\(\) failed: (User not known to the underlying authentication module: \d+ Time\(s\)|Authentication failure \(password mismatch\?\))\s*$

ignoreregex =

# DEV Notes:
# * the first regex is essentially a copy of pam-generic.conf
# * Probably doesn't do dovecot sql/ldap backends properly
# * Removed the 'no auth attempts' log lines from the matches because produces
#    lots of false positives on misconfigured MTAs making regexp unuseable
#
# Author: Martin Waschbuesch
#         Daniel Black (rewrote with begin and end anchors)

-------------

11

Re: fail2ban triggered, could it be due to missing dovecot-acl?

In jail.local, you can see this:

pbf343 wrote:

[dovecot-iredmail]
enabled     = true
filter      = dovecot.iredmail

"filter =" line defines the filter config file, which is /etc/fail2ban/filter.d/dovecot.iredmail.conf

12 (edited by pbf343 2015-08-31 22:57:25)

Re: fail2ban triggered, could it be due to missing dovecot-acl?

Thank you.

So with this file:
cat /etc/fail2ban/filter.d/dovecot.iredmail.conf
[Definition]
failregex = Authentication failure.* rip=<HOST>
            Aborted login \(no auth attempts in .* rip=<HOST>
            Aborted login \(auth failed.* rip=<HOST>
            Aborted login \(tried to use disallowed .* rip=<HOST>
            Aborted login \(tried to use disabled .* rip=<HOST>

ignoreregex =

Log info:
Aug 28 07:12:35 imap-login: Info: Aborted login (auth failed, 1 attempts in 2 secs): user=<steve@domains_name.tld>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y, TLS, session=<0SoYKV0eaAAySeJ2>

Aug 28 07:12:37 imap-login: Info: Login: user=<steve@domains_name.tld>, method=PLAIN, rip=x.x.x.x, lip=y.y.y.y, mpid=543, TLS, session=<2lgYKV0eaQAySeJ2>



So is the "auth failed" the cause?  If so, in 2 seconds, the user went from a failed login to a successful connection but then fail2ban locked out the IP within about 10-15 minutes.   In this file, I do not see any kind of count on the authorization failures.  So does one failure, or possibly a number in time, result in the block?

13

Re: fail2ban triggered, could it be due to missing dovecot-acl?

The failure times is defined in jail.local, `maxretry=`.

14

Re: fail2ban triggered, could it be due to missing dovecot-acl?

ZhangHuangbin wrote:

The failure times is defined in jail.local, `maxretry=`.

Thank you.

Does that apply when exceeding 5 retries inside the "findtime" [value of 1 hour (3600 seconds)]?