diff --git a/config/jail.conf b/config/jail.conf
index c30b50e8..60bb23c6 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -472,9 +472,16 @@ filter = webmin-auth
 action = iptables-multiport[name=webmin,port="10000"]
 logpath  = /var/log/auth.log
 
+# dovecot defaults to logging to the mail syslog facility
+# but can be set by syslog_facility in the dovecot configuration.
 [dovecot]
 enabled = false
 filter = dovecot
 action = iptables-multiport[name=dovecot, port="pop3,pop3s,imap,imaps", protocol=tcp]
-logpath = /var/log/secure
+logpath = /var/log/mail.log
 
+[dovecot-auth]
+enabled = false
+filter = dovecot
+action = iptables-multiport[name=dovecot-auth, port="pop3,pop3s,imap,imaps", protocol=tcp]
+logpath = /var/log/secure