[Logcheck-devel] Bug#271569: logcheck: Every connection logged by uw-imapd is reported

[Will Deutsch]

Package: logcheck
Version: 1.2.25
Severity: normal

Log check emails this:
System Events
=-=-=-=-=-=-=
Sep 13 12:03:21 localhost imapd[15926]: connect from 127.0.0.1 (127.0.0.1)
Sep 13 12:03:21 localhost imapd[15929]: connect from 127.0.0.1 (127.0.0.1)
Sep 13 12:03:21 localhost imapd[15932]: connect from 127.0.0.1 (127.0.0.1)
Sep 13 12:53:09 localhost imapd[16033]: connect from 198.95.226.228 (198.95.226.228)

The rules for uw-imapd don't seem to match the output. On systems with
very high imap traffic this gets problematic. My logs basically
trigger logcheck every hour of every day.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8.1
Locale: LANG=C, LC_CTYPE=C

Versions of packages logcheck depends on:
ii  adduser                       3.59       Add and remove users and groups
ii  cron                          3.0pl1-86  management of regular background p
ii  debconf [debconf-2.0]         1.4.30.2   Debian configuration management sy
ii  debianutils                   2.8.4      Miscellaneous utilities specific t
ii  exim [mail-transport-agent]   3.36-11    An MTA (Mail Transport Agent)
ii  lockfile-progs                0.1.10     Programs for locking and unlocking
ii  logcheck-database             1.2.25     A database of system log rules for
ii  logtail                       1.2.25     Print log file lines that have not
ii  mailutils [mailx]             1:0.5-3    GNU mailutils utilities for handli
ii  perl                          5.8.4-2    Larry Wall's Practical Extraction 
ii  sysklogd [system-log-daemon]  1.4.1-15   System Logging Daemon

-- debconf information excluded