[Logcheck-devel] Bug#260810: logcheck: ignore.d.server/postfix doesn't properly ignore some postfix messages

[Colm G. Connolly]

Package: logcheck
Version: 1.2.23
Severity: normal

Messages from postfix like these two below are not ignored by the regexpes
included in the ignore.d.server/postfix file. (These come from postfix
2.1.3-1 package.)

Jul 22 01:00:08 localhost postfix/lmtp[9415]: 8B7D8383ED4A: to=<root at darwin.ucd.ie>, orig_to=<root>, relay=127.0.0.1[127.0.0.1], delay=0, status=sent (250 2.6.0 Ok, id=07715-07, from MTA: 250 Ok: queued as D63D1383ED4B)
Jul 21 01:05:01 localhost postfix/smtpd[27972]: warning: Illegal address syntax from localhost[127.0.0.1] in MAIL command: jhagenoy@

The following patch to the ignore.d.server/postfix fixes these problems.

--- postfix-orig	2004-07-22 11:08:22.000000000 +0100
+++ postfix	2004-07-22 11:06:42.000000000 +0100
@@ -54,4 +54,5 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:alnum:]]+: client=[^[:space:]]+, sasl_sender=.*$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: numeric result [.0-9]+ in address->name lookup for [^[:space:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Illegal address syntax from [^[:space:]]+ in (MAIL|RCPT) command: <.*>$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Illegal address syntax from [^[:space:]]+ in (MAIL|RCPT) command: <?.*>?$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]: [0-9A-F]: to=<[^[:space:]]+>, orig_to=<[^[:space:]]+>, relay=[^[:space:]]+\], delay=[0-9]+ status=sent \(250 2\.1\.5 Ok\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]: [0-9A-F]+: to=<[^[:space:]]+>, orig_to=<[^[:space:]]+>, relay=[^[:space:]]+\[[^[:space:]]+\], delay=[0-9]+, status=sent \(250 2\.6\.0 Ok, id=[-0-9]+, from MTA: 250 Ok: queued as [0-9A-F]+\)$



-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-darwin.4
Locale: LANG=en_IE at euro, LC_CTYPE=en_IE at euro

Versions of packages logcheck depends on:
ii  adduser          3.57                    Add and remove users and groups
ii  cron             3.0pl1-83               management of regular background p
ii  debconf [debconf 1.4.29                  Debian configuration management sy
ii  debianutils      2.8.3                   Miscellaneous utilities specific t
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.23                  A database of system log rules for
ii  logtail          1.2.23                  Print log file lines that have not
ii  mailx            1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii  perl             5.8.3-3                 Larry Wall's Practical Extraction 
ii  postfix [mail-tr 2.1.3-1                 A high-performance mail transport 
ii  sysklogd [system 1.4.1-10                System Logging Daemon

-- debconf information excluded