[Logcheck-commits] Hannes von Haugwitz: i.d.s/klogind: new (ignore "connect from" message)
Gerfried Fuchs
alfie at alioth.debian.org
Thu Feb 25 19:20:32 UTC 2010
Module: logcheck
Branch: lenny-backports
Commit: 19a7ed35e5e9a62c8cc0e013b0c1f8b734911982
URL: http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=19a7ed35e5e9a62c8cc0e013b0c1f8b734911982
Author: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Date: Mon Feb 1 09:41:33 2010 +0100
i.d.s/klogind: new (ignore "connect from" message)
---
debian/changelog | 2 ++
rulefiles/linux/ignore.d.server/klogind | 1 +
2 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 2f10047..7d82d36 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,8 @@
logcheck (1.3.7) UNRELEASED; urgency=low
[ Hannes von Haugwitz ]
+ * ignore.d.server/klogind: new
+ - added rule for "connect from" message
* ignore.d.server/login:
- added rule for root logins on pseudo terminals
* ignore.d.server/bind:
diff --git a/rulefiles/linux/ignore.d.server/klogind b/rulefiles/linux/ignore.d.server/klogind
new file mode 100644
index 0000000..1f56f3e
--- /dev/null
+++ b/rulefiles/linux/ignore.d.server/klogind
@@ -0,0 +1 @@
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ klogind\[[0-9]+\]: connect from (([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\.){3}([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5]) \((([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\.){3}([0-9]|([1-9]|1[0-9]|2[0-4])[0-9]|25[0-5])\)$
More information about the Logcheck-commits
mailing list