[Logcheck-commits] r1269 - in logcheck/trunk: debian rulefiles/linux/violations.ignore.d

[madduck at users.alioth.debian.org]

Author: madduck
Date: 2006-10-19 08:17:55 +0000 (Thu, 19 Oct 2006)
New Revision: 1269

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-bind
   logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix
Log:
* violations.ignore.d/logcheck-postfix: updated filter for generic smtp
  status messages to postfix 2.3 (closes: #376533).
* violations.ignore.d/logcheck-bind: ignoring messages for unexpected
  RCODEs; thanks to Ingo Theiss (closes: #378333).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-10-19 07:56:30 UTC (rev 1268)
+++ logcheck/trunk/debian/changelog	2006-10-19 08:17:55 UTC (rev 1269)
@@ -18,8 +18,12 @@
     rules to support nagios2; thanks to Cyril Chaboisseau (closes: #355364).
   * ignore.d.server/innd: ignoring new message about flushing messages by
     send-uucp; thanks to Thomas Parmelan (closes: #387272).
+  * violations.ignore.d/logcheck-postfix: updated filter for generic smtp
+    status messages to postfix 2.3 (closes: #376533).
+  * violations.ignore.d/logcheck-bind: ignoring messages for unexpected
+    RCODEs; thanks to Ingo Theiss (closes: #378333).
 
- -- martin f. krafft <madduck at debian.org>  Thu, 19 Oct 2006 09:55:50 +0200
+ -- martin f. krafft <madduck at debian.org>  Thu, 19 Oct 2006 10:17:10 +0200
 
 logcheck (1.2.49~unreleased.2) UNRELEASED; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-bind
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-bind	2006-10-19 07:56:30 UTC (rev 1268)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-bind	2006-10-19 08:17:55 UTC (rev 1269)
@@ -1 +1,2 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN: refresh: failure trying master [._[:alnum:]-]+#53: .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: unexpected RCODE \((REFUSED|SERVFAIL)\) resolving '[^[:space:]]+': [.[:digit:]]+#[0-9]+$

Modified: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix	2006-10-19 07:56:30 UTC (rev 1268)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix	2006-10-19 08:17:55 UTC (rev 1269)
@@ -10,7 +10,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: smtpd_peer_init: [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+: hostname [^[:space:]]+ verification failed: (Temporary failure in name resolution|Name or service not known|No address associated with hostname)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: Peer verification: CommonName in certificate does not match: [._*[:alnum:]-]+ != [._[:alnum:]-]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [[:upper:]0-9]+: host [^[:space:]]+ said: [45][0-9][0-9] .* \(in reply to (HELO|EHLO|MAIL FROM|RCPT TO|end of DATA) command\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [[:upper:]0-9]+: to=<[^[:space:]]+>, relay=[._[:alnum:]-]+\[[0-9.]{7,15}\], delay=[0-9]+, status=(deferred|bounced) \(host [._[:alnum:]-]+\[[0-9.]{7,15}\] said: [45][0-9][0-9] .* \(in reply to (HELO|EHLO|MAIL FROM|RCPT TO|end of DATA) command\)\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [[:upper:]0-9]+: to=<[^[:space:]]+>, relay=[._[:alnum:]-]+\[[0-9.]{7,15}\], delay=[.0-9]+(, delays=([.0-9]+/){3}[.0-9]+)?(, dsn=[45](\.[0-9]+){2})?, status=(deferred|bounced|undeliverable) \(host [._[:alnum:]-]+\[[0-9.]{7,15}\] said: [45][0-9][0-9] .* \(in reply to (HELO|EHLO|MAIL FROM|RCPT TO|end of DATA) command\)\)$ 
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [A-Z0-9]+: to=<[^[:space:]]+>, relay=[^[:space:]]+, delay=[0-9]+, status=deferred \(host [^[:space:]]+ refused to talk to me: [^[:space:]]+ 554 Access denied\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Read failed in network_biopair_interop with errno=[0-9]+: num_read=[0-9]+, want_read=[0-9]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: handler sender_permitted_from: DUNNO$