[Logcheck-commits] r1254 - in logcheck/trunk: debian rulefiles/linux/violations.ignore.d

[madduck at users.alioth.debian.org]

Author: madduck
Date: 2006-10-18 20:08:34 +0000 (Wed, 18 Oct 2006)
New Revision: 1254

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix
Log:
* ignore.d.server/postfix: again ignore warning about failed SASL auth.

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-10-18 20:03:31 UTC (rev 1253)
+++ logcheck/trunk/debian/changelog	2006-10-18 20:08:34 UTC (rev 1254)
@@ -5,6 +5,7 @@
     initial server greeting.
   * ignore.d.server/postfix: ignore warning about lost connections any type of
     upper case SMTP command.
+  * ignore.d.server/postfix: again ignore warning about failed SASL auth.
   * ignore.d.server/cron-apt: ignore regular messages about downgrades; they
     are not going to take place anyway, and an error message is emitted
     nevertheless.
@@ -24,7 +25,7 @@
   * ignore.d.server/dovecot: ignore more messages about inactivity disonnects.
   * ignore.d.server/dovecot: ignore PAM auth messages about unknown users.
 
- -- martin f. krafft <madduck at debian.org>  Wed, 18 Oct 2006 22:01:22 +0200
+ -- martin f. krafft <madduck at debian.org>  Wed, 18 Oct 2006 22:08:14 +0200
 
 logcheck (1.2.48) unstable; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix	2006-10-18 20:03:31 UTC (rev 1253)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix	2006-10-18 20:08:34 UTC (rev 1254)
@@ -27,5 +27,5 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/qmgr\[[0-9]+\]: [[:alnum:]]+: from=<[^[:space:]]*>, size=[0-9]+, nrcpt=[0-9]+ \(queue active\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)* relay=local, delay=[0-9]+, status=sent \(delivered to command: /var/lib/mailman/mail/mailman admin [._[:alnum:]-]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE: reject: RCPT from [^[:space:]]+: 554 <[^[:space:]]+>: Client host rejected: Access denied; from=<[^[:space:]]+> to=<[^[:space:]]+> proto=E?SMTP helo=<[^[:space:]]+>$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: [-._[:alnum:]]+\[[.[:digit:]]+\]: SASL (LOGIN|PLAIN|(DIGEST|CRAM)-MD5|APOP) authentication failed$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: [-._[:alnum:]]+\[[.[:digit:]]+\]: SASL (LOGIN|PLAIN|(DIGEST|CRAM)-MD5|APOP) authentication failed:?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: SASL authentication failure: Password verification failed$