[Logcheck-commits] martin f. krafft: ignore errors due to invalid qdomains causing servfails.

[Martin F. Krafft]

Module: logcheck
Branch: master
Commit: 51fb0abc0785f7d366e3f6f24afac1857a5bf8ea
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=51fb0abc0785f7d366e3f6f24afac1857a5bf8ea

Author: martin f. krafft <madduck at debian.org>
Date:   Sun Aug 31 19:02:47 2008 +0100

ignore errors due to invalid qdomains causing servfails.

---

 debian/changelog                     |    1 +
 rulefiles/linux/ignore.d.server/pdns |    2 +-
 2 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index a863239..ade3bb9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -38,6 +38,7 @@ logcheck (1.3) unstable; urgency=low
     - allow hyphen in interface names in listen messages.
   * ignore.d.server/pdns:
     - ignore parsing errors for packages of arbitrary size.
+    - ignore errors due to invalid qdomains causing servfails.
   * ignore.d.server/ikiwiki:
     - ignore error when "do" parameter has not been passed to CGI.
   * ignore.d.server/openvpn:
diff --git a/rulefiles/linux/ignore.d.server/pdns b/rulefiles/linux/ignore.d.server/pdns
index d523814..f9a91f4 100644
--- a/rulefiles/linux/ignore.d.server/pdns
+++ b/rulefiles/linux/ignore.d.server/pdns
@@ -28,7 +28,7 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received NOTIFY for ([-_.[:alnum:]]+)? from [.[:digit:]]{7,15} for which we are not authoritative$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received NOTIFY for [-_.[:alnum:]]+ from [.[:digit:]]{7,15} which is not a master$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received NOTIFY for [-_.[:alnum:]]+ from master [.[:digit:]]{7,15}, we are up to date: [[:digit:]]+<=[[:digit:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received a malformed qdomain from [.[:digit:]]{7,15}, '.+': dropping$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received a malformed qdomain from [.[:digit:]]{7,15}, '.+': (dropping|sending servfail)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received an overly large question from [.[:digit:]]{7,15}, dropping$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received an unknown opcode [[:digit:]]+ from [.[:digit:]]{7,15} for( [-_.[:alnum:]]+)?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ pdns\[[[:digit:]]+\]: Received packet from recursor backend with id [[:digit:]] which is a duplicate$