[Logcheck-commits] Hanspeter Kunz: i.d.s/dovecot: ignore discarded vacation responses and duplicate forwards
Gerfried Fuchs
alfie at alioth.debian.org
Wed May 12 00:08:45 UTC 2010
Module: logcheck
Branch: lenny-backports
Commit: 9ccc2012d3df8f1a77259abc4995df4fd4fea823
URL: http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=9ccc2012d3df8f1a77259abc4995df4fd4fea823
Author: Hanspeter Kunz <hp at edelkunz.ch>
Date: Sat Mar 27 00:12:46 2010 +0100
i.d.s/dovecot: ignore discarded vacation responses and duplicate forwards
---
debian/changelog | 4 +++-
rulefiles/linux/ignore.d.server/dovecot | 2 +-
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index a7eec01..f5c2171 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -23,8 +23,10 @@ logcheck (1.3.8) UNRELEASED; urgency=low
* ignore.d.server/dovecot:
- ignore more failed and aborted logins
- msgid's may contain colons
+ - ignore discarded vacation responses (bulk, auto-submited, duplicates)
+ - ignore duplicate forwards
- -- Hanspeter Kunz <hp at edelkunz.ch> Fri, 26 Mar 2010 23:58:27 +0100
+ -- Hanspeter Kunz <hp at edelkunz.ch> Sat, 27 Mar 2010 00:08:40 +0100
logcheck (1.3.7) unstable; urgency=low
diff --git a/rulefiles/linux/ignore.d.server/dovecot b/rulefiles/linux/ignore.d.server/dovecot
index 9c884c3..5596448 100644
--- a/rulefiles/linux/ignore.d.server/dovecot
+++ b/rulefiles/linux/ignore.d.server/dovecot
@@ -1,6 +1,6 @@
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login: Disconnected \[[.:[:xdigit:]]+\]$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?deliver\([-_.@[:alnum:]]+\): msgid=<?[^\(]*>?( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\)?)?[[:space:]]*: (saved mail to [-_.[:alnum:]]+|(forwarded|discarded duplicate forward) to <[^[:space:]]+>)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?deliver\([-_.@[:alnum:]]+\): sieve: msgid=<?[^\(]*>?[[:space:]]*: (stored mail into mailbox '[-_.[:alnum:]]+'|marked message to be discarded if not explicitly delivered \(discard action\)|(forwarded to|sent vacation response to|discarding vacation response for message implicitly delivered to|not sending vacation response to system address|discarding vacation response to mailinglist recipient) <[^[:space:]]+>)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?deliver\([-_.@[:alnum:]]+\): sieve: msgid=<?[^\(]*>?[[:space:]]*: (stored mail into mailbox '.*'|marked message to be discarded if not explicitly delivered \(discard action\)|(forwarded to|sent vacation response to|discarding vacation response for message implicitly delivered to|not sending vacation response to system address|discarding vacation response to mailinglist recipient|discarded vacation reply to|discarding vacation response to (auto-submitted|precedence=bulk) message from|discarded duplicate (vacation response|forward) to) <[^[:space:]]+>)$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([-_.@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?( user=[-_.@[:alnum:]]+)?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check pass; user unknown$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_unix\(dovecot:[[:alnum:]]+\): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([-_.@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?( user=[-_.@[:alnum:]]+)?$
More information about the Logcheck-commits
mailing list