[Logcheck-commits] r1667 - in logcheck/branches/macros: debian rulefiles/linux/violations.ignore.d

[madduck at users.alioth.debian.org]

Author: madduck
Date: 2007-08-23 07:58:29 +0000 (Thu, 23 Aug 2007)
New Revision: 1667

Modified:
   logcheck/branches/macros/debian/changelog
   logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-postfix
Log:
  - fix authentication failure messages related to SASL (closes: #437886).


Modified: logcheck/branches/macros/debian/changelog
===================================================================
--- logcheck/branches/macros/debian/changelog	2007-08-23 07:58:27 UTC (rev 1666)
+++ logcheck/branches/macros/debian/changelog	2007-08-23 07:58:29 UTC (rev 1667)
@@ -20,6 +20,7 @@
   * violations.ignore.d/logcheck-postfix:
     - ignore milter-reject virus rejection notices.
     - ignore temporary milter failures (due to clamav-milter socket timeouts).
+    - fix authentication failure messages related to SASL (closes: #437886).
 
   * ignore.d.server/postfix:
     - ignore warnings about not being able to resolve (sender) MX hosts.
@@ -56,7 +57,7 @@
   * ignore.d.server/bind, violations.ignore.d/logcheck-bind:
     - also ignore unresolved RCODE 15 in warning messages (closes: #437891).
 
- -- martin f. krafft <madduck at debian.org>  Thu, 23 Aug 2007 09:50:55 +0200
+ -- martin f. krafft <madduck at debian.org>  Thu, 23 Aug 2007 09:53:16 +0200
 
 logcheck (1.2.58) unstable; urgency=low
 

Modified: logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-postfix
===================================================================
--- logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-postfix	2007-08-23 07:58:27 UTC (rev 1666)
+++ logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-postfix	2007-08-23 07:58:29 UTC (rev 1667)
@@ -36,7 +36,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: (NOQUEUE|[[:xdigit:]]+): reject: [[:upper:]]+ from [^[:space:]]+: 550( 5\.1\.[01])? <[^[:space:]]+>: (Sender|Recipient) address rejected: User unknown in ((local|relay) recipient|virtual alias) table;( from=<[^[:space:]]*> to=<[^[:space:]]+>)? proto=E?SMTP( helo=<[^[:space:]]+>)?$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[ls]mtp\[[0-9]+\]: [[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)? relay=[^[:space:]]+,( conn_use=[[:digit:]]+,)? delay=[.0-9]+,( delays=[.0-9/]+, dsn=[0-9.]+,)? status=sent \(250 [0-9.]+ Ok((, id=[-0-9]+, from MTA(\([^[:space:]]+\))?: 250 ([0-9.]+ )?Ok)?: queued as [0-9A-F]+|, discarded, UBE, id=[-0-9]+)*|, DSN muted \([45][0-9][0-9] [45](\.[0-9]){2} .+\)\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[ls]mtp\[[0-9]+\]: [[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)* relay=[^[:space:]]+,( conn_use=[[:digit:]]+,)? delay=[.0-9]+,( delays=[.0-9/]+, dsn=[0-9.]+,)? status=sent \(250 Ok: queued as [0-9A-F]+\)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: [-._[:alnum:]]+\[[.[:digit:]]+\]: SASL (LOGIN|PLAIN|(DIGEST|CRAM)-MD5|APOP) authentication failed:?$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: [-._[:alnum:]]+\[[.[:digit:]]+\]: SASL (LOGIN|PLAIN|(DIGEST|CRAM)-MD5|APOP) authentication failed(:( authentication failure)?)?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: SASL authentication failure: Password verification failed$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/local\[[[:digit:]]+\]: warning: maildir access problem for UID/GID=[[:digit:]]+/[[:digit:]]+: create [/.[:alnum:]]+: Permission denied$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)? relay=local, delay=[0-9.]+(, delays=([.0-9]+/){3}[.0-9]+)?(, dsn=[45](\.[0-9]+){2})?, status=(deferred|bounced) \(.+\)$