[Logcheck-devel] Bug#274497: Add blocked messages to violations.ignore.d/logcheck-postfix

[Patrik Wallstrom]

Package: logcheck
Version: 1.2.28
Severity: wishlist
Tags: patch

In the lines of this:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE:
reject: RCPT from [^[:space:]]+: [0-9]{3} <[^[:space:]]+>: Blocked -
see <[^[:space:]]+>; from=<[^[:space:]]*> to=<[^[:space:]]+>
proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$

When using RBL:s in Postfix, this is a common error message.

Example:

Oct  2 09:06:29 vic20 postfix/smtpd[7194]: NOQUEUE: reject: RCPT from
unknown[203.236.46.238]: 554 Service unavailable; Client host
[203.236.46.238]
blocked using cbl.abuseat.org; Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=203.236.46.238;
from=<Terrell at incamail.com>to=<marlene at blipp.com> proto=SMTP
helo=<217.75.101.38>

I don't know if my regex is 100% correct though.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.5
Locale: LANG=C, LC_CTYPE=sv_SE

Versions of packages logcheck depends on:
ii  adduser          3.59                    Add and remove users and groups
ii  cron             3.0pl1-86               management of regular background p
ii  debconf [debconf 1.4.38                  Debian configuration management sy
ii  debianutils      2.10.2                  Miscellaneous utilities specific t
ii  lockfile-progs   0.1.10                  Programs for locking and unlocking
ii  logcheck-databas 1.2.28                  A database of system log rules for
ii  logtail          1.2.28                  Print log file lines that have not
ii  mailx            1:8.1.2-0.20040524cvs-1 A simple mail user agent
ii  perl             5.8.4-2.3               Larry Wall's Practical Extraction 
ii  postfix [mail-tr 2.1.4-5                 A high-performance mail transport 
ii  sysklogd [system 1.4.1-15                System Logging Daemon

-- debconf information:
  logcheck/changes:
* logcheck/install-note: