[Logcheck-commits] Hanspeter Kunz: i.d.s/dovecot: ignore discarded vacation responses and duplicate forwards

[Gerfried Fuchs]

Module: logcheck
Branch: lenny-backports
Commit: 9ccc2012d3df8f1a77259abc4995df4fd4fea823
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=9ccc2012d3df8f1a77259abc4995df4fd4fea823

Author: Hanspeter Kunz <hp at edelkunz.ch>
Date:   Sat Mar 27 00:12:46 2010 +0100

i.d.s/dovecot: ignore discarded vacation responses and duplicate forwards

---

 debian/changelog                        |    4 +++-
 rulefiles/linux/ignore.d.server/dovecot |    2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index a7eec01..f5c2171 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -23,8 +23,10 @@ logcheck (1.3.8) UNRELEASED; urgency=low
   * ignore.d.server/dovecot:
     - ignore more failed and aborted logins
     - msgid's may contain colons   
+    - ignore discarded vacation responses (bulk, auto-submited, duplicates)
+    - ignore duplicate forwards 
 
- -- Hanspeter Kunz <hp at edelkunz.ch>  Fri, 26 Mar 2010 23:58:27 +0100
+ -- Hanspeter Kunz <hp at edelkunz.ch>  Sat, 27 Mar 2010 00:08:40 +0100
 
 logcheck (1.3.7) unstable; urgency=low
 
diff --git a/rulefiles/linux/ignore.d.server/dovecot b/rulefiles/linux/ignore.d.server/dovecot
index 9c884c3..5596448 100644
--- a/rulefiles/linux/ignore.d.server/dovecot
+++ b/rulefiles/linux/ignore.d.server/dovecot
@@ -1,6 +1,6 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login: Disconnected \[[.:[:xdigit:]]+\]$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?deliver\([-_.@[:alnum:]]+\): msgid=<?[^\(]*>?( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\)?)?[[:space:]]*: (saved mail to [-_.[:alnum:]]+|(forwarded|discarded duplicate forward) to <[^[:space:]]+>)$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?deliver\([-_.@[:alnum:]]+\): sieve: msgid=<?[^\(]*>?[[:space:]]*: (stored mail into mailbox '[-_.[:alnum:]]+'|marked message to be discarded if not explicitly delivered \(discard action\)|(forwarded to|sent vacation response to|discarding vacation response for message implicitly delivered to|not sending vacation response to system address|discarding vacation response to mailinglist recipient) <[^[:space:]]+>)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?deliver\([-_.@[:alnum:]]+\): sieve: msgid=<?[^\(]*>?[[:space:]]*: (stored mail into mailbox '.*'|marked message to be discarded if not explicitly delivered \(discard action\)|(forwarded to|sent vacation response to|discarding vacation response for message implicitly delivered to|not sending vacation response to system address|discarding vacation response to mailinglist recipient|discarded vacation reply to|discarding vacation response to (auto-submitted|precedence=bulk) message from|discarded duplicate (vacation response|forward) to) <[^[:space:]]+>)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([-_.@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?(  user=[-_.@[:alnum:]]+)?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check pass; user unknown$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_unix\(dovecot:[[:alnum:]]+\): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([-_.@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?(  user=[-_.@[:alnum:]]+)?$