anchor.diff:  [courier-auth]
   
   enabled  = <%= scope['::fail2ban::jails'].include? "courier-auth" %>
  -port     = smtp,465,submission,imap3,imaps,pop3,pop3s
  +port     = smtp,465,submission,imap,imaps,pop3,pop3s
   logpath  = %(syslog_mail)s
   backend  = %(syslog_backend)s
   
  
positive.code: [perdition]
  
  enabled  = <%= scope['::fail2ban::jails'].include? "perdition" %>
  port   = imap3,imaps,pop3,pop3s
  logpath = %(syslog_mail)s
  backend = %(syslog_backend)s
  
  
negative.code: [postfix-sasl]
  
  enabled  = <%= scope['::fail2ban::jails'].include? "postfix-sasl" %>
  port     = smtp,465,submission,imap,imaps,pop3,pop3s
  # You might consider monitoring /var/log/mail.warn instead if you are
  # running postfix since it would provide the same log lines at the
  # "warn" level but overall at the smaller filesize.
  