Hello all!)
I have a BIG 1 rule in my firewall, that blocks connections to server on mail ports (25,110,143,993,995,2525).
Why it is BIG? Because in this rule i have a large list of IP addresses and IP blocks/nets (like 46.148.40.0/24). I collect IP addresses which appears in fail2ban...