Bug#286331: acknowledged by developer (Re: [Logcheck-devel] Bug#286331: logcheck-database: Restart messages for spamd (when using rulesdujour))
Marc Sherman
msherman at projectile.ca
Thu Jan 6 13:52:26 UTC 2005
maximilian attems wrote:
>
>>package; the log messages are caused by a local install at my site of
>>rulesdujour, which restarts spamd in the daily cron job when the
>>downloaded rules are updated.
>>
>>The following messages are logged when this happens:
>>Dec 19 07:20:41 pyloric spamd[23676]: server killed by SIGTERM, shutting
>>down
>>Dec 19 07:20:43 pyloric root: spamd starting
>>Dec 19 07:20:58 pyloric spamd[679]: server started on port 783/tcp
>>(running version 2.64)
>
>
> this looks like an "security event" which logcheck out of policy
> won't filter, please include that in your local-spamd file
> in /etc/logcheck/violations.ignore.d/.
Nope, those aren't picked up as violations -- I've had them filtered in
my ignore.server.d/spamd for a while now, and it works just fine. I
understand if you don't want to add them to the distro, though, so
please let me know and I'll move them to ignore.server.d/local-spamd.
Will logcheck complain if there's a foo and a local-foo in the same
directory?
Thanks,
- Marc
More information about the Logcheck-devel
mailing list