[Logcheck-devel] Bug#310423: logcheck-database: rules for dovecot are incompleet

Robbert Muller muller at muze.nl
Mon May 23 21:11:13 UTC 2005


Jamie L. Penman-Smithson wrote:
> On Mon, 2005-05-23 at 15:41 +0200, Robbert Muller wrote:
> 
>>the file /etc/logcheck/ignore.d.server/dovecot only contains rules for
>>dovecot's imap server, but the rule for dovecots pop3 server are
>>missing.
> 
> 
> Could you provide some messages for the dovecot pop3 server?

the same as imap ;-)

the rules i made
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3-login: Login: [.[:alnum:]@-]+ 
\[[0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3-login: Disconnected \[[0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3\([^[:space:]]+\): File isn't in 
mbox format: [^[:space:]]+$

the only type of line i got till now
May 23 22:54:59 host pop3-login: Login: user at domain.nl [10.10.10.10]

hope this helps

regards
   Robbert









More information about the Logcheck-devel mailing list