fail2ban/fail2ban — pull request #600 by aseques (2014-01-28 11:56:46+00:00)
Title: Removed the -no auth attempts- from the triggers because of lots of FP

According to dovecot's wiki http://wiki2.dovecot.org/WhyDoesItNotWork

Aborted login (no auth attempts) means that the client isn't even attempting to log in. Most likely you have disable_plaintext_auth=yes (default) and the client isn't configured to use SSL/TLS (or you've also set ssl=no).

Looking on our logs, I found plenty of legitimate clients facing this error, and found on the internet reports for many mail clients (thunderbird, kmail, outlook, ..), just have a look at "no auth attempts" at google. Most of the times is mail client fault

Hence I disabled this from the regexp and adjusted both the sample logs and the code.