Bug#259094: [Logcheck-devel] Bug#259094: logcheck-database: correction to cyrus rules

[maks attems]

tags 259094 moreinfo
thanks

On Tue, 13 Jul 2004, Jamie L. Penman-Smithson wrote:

> package: logcheck-database
> version: 1.2.23
> severity: wishlist
> 
> If you use policy-spf with postfix it generates alot of spurious log
> messages, all of which can safely be ignored.
>  
> --- logcheck-postfix.orig       2004-07-09 04:03:11.000000000 +0100
> +++ logcheck-postfix    2004-07-13 02:18:28.000000000 +0100
> @@ -6,3 +6,5 @@
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: smtpd_peer_init: [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+: hostname [^[:space:]]+ verification failed: (Temporary failure in name resolution|Name or service not known|No address associated with hostname)$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: Peer verification: CommonName in certificate does not match: [._[:alnum:]-]+ != [._[:alnum:]-]+$
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [A-Z0-9]+: host [^[:space:]]+ said: [45][0-9][0-9] .* \(in reply to (HELO|EHLO|MAIL FROM|RCPT TO|end of DATA) command\)$
> +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: handler sender_permitted_from: DUNNO$
> +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: : SPF none: smtp_comment=SPF: domain of sender [^[:space:]]+ does not designate mailers, header_comment=[a-z\.]+: domain of [^[:space:]]+ does not designate permitted sender hosts$

hmm are these really need inside of violations.ignore.d/logcheck-postfix?
shouldn't they go to ignore.d.server/postfix?
could you post some offending messages and which layer they were
shown from logcheck ("Security Events" or "System Events")?

a++ maks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040713/82bdf59d/attachment.pgp