[Logcheck-devel] Logcheck problem

Torsten Valentin versteigerung at musiker.de
Tue May 17 12:26:26 UTC 2005


Hi!

Is there a mailing list or so where I can get help for logcheck (woody)? 
I have a strange problem:

My mail-setup causes the following entries from time to time, which is OK:

May 17 11:10:48 www2 sm-mta[32066]: j4H9ATSI032066: nobody at localhost 
[127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

Now I want logcheck to not report these entries. Therefore I added to 
/etc/logcheck/ignore.d.server/sendmail:

(sendmail|sm-(mta|msp|que)).*: .*: nobody at localhost \[.*\] did not issue 
MAIL/EXPN/VRFY/ETRN during connection to MTA

But the rule never applies, and I can't see for what reason. The entries 
are always reported to me. I am quite sure I'm using the correct config 
file, because changes to other rules in that config-file apply. I even 
tried to add this at the beginning of the config file:

sm-mta.*did not issue MAIL/EXPN/VRFY/ETRN .*

but it didn't work neither. Any ideas where I can get help for this 
problem?

Thanks in advance!

Regards,
T.





More information about the Logcheck-devel mailing list