[Logcheck-commits] r1478 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Sun Jan 28 20:25:56 CET 2007


Author: madduck
Date: 2007-01-28 20:25:56 +0100 (Sun, 28 Jan 2007)
New Revision: 1478

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/postfix
Log:
* ignore.d.server/postfix: patch by Armin Berres to filter policyd-weight
  messages (closes: #408700).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2007-01-28 19:23:00 UTC (rev 1477)
+++ logcheck/trunk/debian/changelog	2007-01-28 19:25:56 UTC (rev 1478)
@@ -15,6 +15,8 @@
     IMail servers (and possibly others; closes: #407777).
   * ignore.d.server/postfix: patch by Armin Berres to filter information
     messages from postfix+mysql (closes: #408444).
+  * ignore.d.server/postfix: patch by Armin Berres to filter policyd-weight
+    messages (closes: #408700).
 
   * ignore.d.server/openvpn: ignore messages related to client-side routes and
     client-config-dir.
@@ -40,7 +42,7 @@
 
   * Updated Czech debconf translation; thanks Miroslav Kure (closes: #407830).
 
- -- martin f. krafft <madduck at debian.org>  Sat, 27 Jan 2007 14:46:20 +0000
+ -- martin f. krafft <madduck at debian.org>  Sun, 28 Jan 2007 19:24:25 +0000
 
 logcheck (1.2.53) unstable; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/postfix
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/postfix	2007-01-28 19:23:00 UTC (rev 1477)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/postfix	2007-01-28 19:25:56 UTC (rev 1478)
@@ -108,3 +108,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: sql plugin trying to open db '[^[:space:]]+' on host '[^[:space:]]+'$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: sql plugin doing query select password from users where email='[^[:space:]]+';$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: sql plugin Parse the username [^[:space:]]+$
+# policyd-weight
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: decided action=PREPEND X-policyd-weight: using cached result; rate: (-)?[[:digit:].]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: decided action=(450 |550) (Mail appeared to be SPAM or forged. Ask your Mail/DNS-Administrator to correct HELO and DNS MX settings or to get removed from DNSBLs(; in [^[:space:]]+)*|Your MTA is listed in too many DNSBLs; check [^[:space:]]+)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: (weighted check|decided action=PREPEND X-policyd-weight):  ([_[:alpha:]]+=(-)?[[:digit:].]+ )+\(check from: [^[:space:]]+ - helo: [^[:space:]]+ - helo-domain: [^[:space:]]+\)  ([\()/_[:alpha:]]+=(-)?[[:digit:].]+ )+<client=[^[:space:]]+> <helo=[^[:space:]]+> <from=[^[:space:]]+> <to=[^[:space:]]+>, rate: (-)?[[:digit:].]+$




More information about the Logcheck-commits mailing list