diff --git a/docs/firststeps-logging.md b/docs/firststeps-logging.md
index 80c64060f..7df477bd2 100644
--- a/docs/firststeps-logging.md
+++ b/docs/firststeps-logging.md
@@ -14,12 +14,12 @@ The **default logging driver is "json"**.
 
 Some logs are filtered and written to Redis keys but also streamed to a Redis channel.
 
-The Redis channel is used to stream logs with failed authentication attempts to be read by fail2ban-mailcow.
+The Redis channel is used to stream logs with failed authentication attempts to be read by netfilter-mailcow.
 
 The Redis keys are persistent and will keep 10000 lines of logs for the web UI.
 
 This mechanism makes it possible to use whatever Docker logging driver you want to, without losing 
-the ability to read logs from the UI or ban suspicious clients with fail2ban-mailcow.
+the ability to read logs from the UI or ban suspicious clients with netfilter-mailcow.
 
 Redis keys will only hold logs from applications and filter out system messages (think of cron etc.).