[Logcheck-commits] r1643 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

[madduck at users.alioth.debian.org]

Author: madduck
Date: 2007-08-15 09:50:29 +0000 (Wed, 15 Aug 2007)
New Revision: 1643

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/amavisd-new
Log:
  - also ignore passing of BAD-HEADER diagnosed messages.


Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2007-08-15 09:02:11 UTC (rev 1642)
+++ logcheck/trunk/debian/changelog	2007-08-15 09:50:29 UTC (rev 1643)
@@ -26,8 +26,9 @@
 
   * ignore.d.server/amavisd-new:
     - ignore message ids with sfid trailer (crm114 adds this).
+    - also ignore passing of BAD-HEADER diagnosed messages.
 
- -- martin f. krafft <madduck at debian.org>  Wed, 15 Aug 2007 11:00:25 +0200
+ -- martin f. krafft <madduck at debian.org>  Wed, 15 Aug 2007 11:05:08 +0200
 
 logcheck (1.2.59) experimental; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/amavisd-new
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/amavisd-new	2007-08-15 09:02:11 UTC (rev 1642)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/amavisd-new	2007-08-15 09:50:29 UTC (rev 1643)
@@ -1,5 +1,5 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^.]+>,)? mail_id: [-+[:alnum:]]+, Hits: -, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed INFECTED \([-._[:alnum:]]+\),( \[[.:[:xdigit:]]+\]){2} <[^>]*> -> <[^>]*>, quarantine: virus-[-+[:alnum:]]+, Message-ID: <[^.]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?, mail_id: [-+[:alnum:]]+, Hits: -, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: -, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed (INFECTED \([-._[:alnum:]]+\)|BAD-HEADER),( \[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>, quarantine: (virus|badh)-[-+[:alnum:]]+, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?, mail_id: [-+[:alnum:]]+, Hits: -, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) NOTICE: Not sending DSN in response to bulk mail from <[^.]*> containing [[:upper:] ]+, mail intentionally dropped$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) INFO: unfolded [[:digit:]]+ illegal all-whitespace continuation lines$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) WARN: address modified \((sender|recipient)\): <[^>]+> -> <[^>]+>$