Sample-jail.local

 [dovecot]
 enabled = true
 filter = dovecot
 action = iptables-multiport-tcp[name=dovecot, port="pop3,pop3s,imap,imaps", protocol=tcp] mail[name=dovecot, dest=root]</n
owiki>
  <nowiki># optionaly mail notification # mail[name=dovecot-pop3imap, dest=root@domain] # see /etc/fail2ban/action.d/ or Fail2Ban do
c 
 logpath = /var/log/maillog
 maxretry = 3
 findtime = 300
 bantime = 1800
 
 [postfix-sasl]
 enabled = true
 filter = postfix-sasl
 action = iptables-multiport-tcp[name=postfix, port="smtp,smtps", protocol=tcp] mail[name=postfix, dest=root]
 # optionaly mail notification # mail[name=dovecot-pop3imap, dest=root@domain] # see /etc/fail2ban/action.d/ or Fail2Ban do
c 
 logpath = /var/log/maillog
 maxretry = 3
 findtime = 300
 bantime = 1800
 protocol = tcp