dovecot 2.1.0 logging change for BFM

Updated the brute_filter.list to accommodate the slightly changed logging entry for dovecot. Essentially renamed dovecot1 to dovecot2, and added a new dovecot1 with a more restricted match to handle the 2.1.0 case. Note that the BFM will still find the entries in 2.1.0, but the attempts per entry will be off. The fix addresses the attempts count.