diff --git a/CHANGELOG.md b/CHANGELOG.md
index 60118ebe..c9d203ae 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 ### Added
 
 * nagios-nrpe: Print pool config path in check_phpfpm_multi output
+* fail2ban: add "Internal login failure" to Dovecot filter
 
 ### Changed
 
diff --git a/fail2ban/files/dovecot-evolix.conf b/fail2ban/files/dovecot-evolix.conf
index e1ef1a3f..5c18fb9f 100644
--- a/fail2ban/files/dovecot-evolix.conf
+++ b/fail2ban/files/dovecot-evolix.conf
@@ -1,3 +1,3 @@
 [Definition]
-failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed|Aborted login \(\d+ authentication attempts).*rip=<HOST>,.*
+failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Internal login failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed|Aborted login \(\d+ authentication attempts).*rip=<HOST>,.*
 ignoreregex =