[Logcheck-devel] Bug#252712: marked as done (logcheck-database: Typo in postfix results in messages not being ignored)

Debian Bug Tracking System owner at bugs.debian.org
Sat Jun 5 19:03:28 UTC 2004

Your message dated Sat, 05 Jun 2004 14:47:15 -0400
with message-id <E1BWgCJ-0002Wy-00 at newraff.debian.org>
and subject line Bug#252712: fixed in logcheck 1.2.22
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Received: (at submit) by bugs.debian.org; 4 Jun 2004 19:53:46 +0000
>From stereo at pioneer.stereo.lu Fri Jun 04 12:53:46 2004
Return-path: <stereo at pioneer.stereo.lu>
Received: from pioneer.stereo.lu [] (postfix)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BWKl8-0006tJ-00; Fri, 04 Jun 2004 12:53:46 -0700
Received: by pioneer.stereo.lu (Mail Service, from userid 1001)
	id B0CE4592033; Fri,  4 Jun 2004 19:53:42 +0000 (UTC)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Guillaume Rischard <reportbug-nospam at stereo.lu>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: logcheck-database: Typo in postfix results in messages not being ignored
X-Mailer: reportbug 2.61
Date: Fri, 04 Jun 2004 19:53:42 +0000
Message-Id: <20040604195342.B0CE4592033 at pioneer.stereo.lu>
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25

Package: logcheck-database
Version: 1.2.21
Severity: normal
Tags: patch

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.20-020stab009.8.777-enterprise

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.4.25     Debian configuration management sy

-- debconf information:
* logcheck-database/conffile-cleanup: true
* logcheck-database/rules-directories-note: 
* logcheck-database/security_level: server
* logcheck-database/standard-rename-note: 

There is an extra single dash at the beginning of line 23 in the postfix ignore file. This causes messages like:

Jun  4 18:00:45 pioneer postfix/smtp[6848]: connect to better-svc-plans.com[]: Connection refused (port 25)

While I'm still working on a patch that will automatically screw lightbulbs in spammers' ears when they cause that message, here is one that will at least get rid of it in the reports.



--- postfix.orig        2004-06-04 19:33:29.000000000 +0000
+++ postfix     2004-06-04 19:33:44.000000000 +0000
@@ -20,7 +20,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: Verified: subject_CN=.*, issuer=.*$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: OTP unavailable because can't read/write key database /etc/opiekeys: No such file or directory$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [A-Z0-9]+: reject: RCPT from [^[:space:]]+: [45][0-9][0-9] .*$
-'^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ Connection refused \(port [0-9]+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ Connection refused \(port [0-9]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ No route to host \(port 25\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ Network is unreachable \(port 25\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ server refused mail service \(port 25\)$

Received: (at 252712-close) by bugs.debian.org; 5 Jun 2004 18:53:06 +0000
>From katie at ftp-master.debian.org Sat Jun 05 11:53:06 2004
Return-path: <katie at ftp-master.debian.org>
Received: from newraff.debian.org [] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BWgHy-00046h-00; Sat, 05 Jun 2004 11:53:06 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
	id 1BWgCJ-0002Wy-00; Sat, 05 Jun 2004 14:47:15 -0400
From: Todd Troxell <ttroxell at debian.org>
To: 252712-close at bugs.debian.org
X-Katie: $Revision: 1.49 $
Subject: Bug#252712: fixed in logcheck 1.2.22
Message-Id: <E1BWgCJ-0002Wy-00 at newraff.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Sat, 05 Jun 2004 14:47:15 -0400
Delivered-To: 252712-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-CrossAssassin-Score: 12

Source: logcheck
Source-Version: 1.2.22

We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:

  to pool/main/l/logcheck/logcheck-database_1.2.22_all.deb
  to pool/main/l/logcheck/logcheck_1.2.22.dsc
  to pool/main/l/logcheck/logcheck_1.2.22.tar.gz
  to pool/main/l/logcheck/logcheck_1.2.22_all.deb
  to pool/main/l/logcheck/logtail_1.2.22_all.deb

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 252712 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)

Hash: SHA1

Format: 1.7
Date: Saturday, 05 Jun 2004 14:02:47 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.22
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
 logcheck   - Mails anomalies in the system logfiles to the administrator
 logcheck-database - A database of system log rules for the use of log checkers
 logtail    - Print log file lines that have not been read
Closes: 187496 214117 244172 249181 249474 252078 252174 252216 252556 252597 252661 252712
 logcheck (1.2.22) unstable; urgency=low
   * Remove broken attempt to avoid UTF-8. (Closes: #214117)
   * Update automount, innd, kernel, openvpn, postfix rules.
     (Closes: #252216, #249474, #244172, #252174, #187496, #249181, #252712)
   * Better readability of greplogoutput() in logcheck.
   * Our Perl usage needs 5.8, add dependency. (Closes: #252078)
   * Rename conflicting logcheck-sendmail rule in logcheck-sendmail_tmp
     Sendmail ships aboves rule. (Closes: #252661, #252556)
   * add MAILTO=root to logcheck.cron.d (Closes: #252597)
 b4d649271722f1adaba3eae3b961bcb4 670 admin optional logcheck_1.2.22.dsc
 cce8e3065b2037b4fdc21af925488117 72703 admin optional logcheck_1.2.22.tar.gz
 15e4a28c47997a531f2c6c8fbc3e1fee 36578 admin optional logcheck_1.2.22_all.deb
 7ffa1c5b19d6a56da2907fbc7cf8731e 40522 admin optional logcheck-database_1.2.22_all.deb
 f4125c78ea56ea2b69da7128731da1cc 21352 admin optional logtail_1.2.22_all.deb

Version: GnuPG v1.2.4 (GNU/Linux)


More information about the Logcheck-devel mailing list