Bug#327088: [Logcheck-devel] Bug#327088: Dovecot rules doesn't work with ipv6

[Jamie L. Penman-Smithson]

package logcheck-database
tags 327088 pending
thanks

On Wed, 2005-09-07 at 17:44 +0200, Marco Nenciarini wrote:
> Your rule does not fit the case that the client have an ipv6 ip. Yhis
> is the log:
> 
> Sep  7 17:41:12 lorien pop3-login: Login: mnencia at prato.linux.it [2001:1418:13:10::1]

Adjusted for next release:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login:
[.[:alnum:]@-]+ \[(::ffff:)?[:0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login:
Disconnected \[(::ffff:)?[:0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (dovecot: )?(imap|
pop3)\([^[:space:]]+\): File isn't in mbox format: [^[:space:]]+$
# dovecot 1.0
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dovecot: (imap|pop3)-login: Login:
user=<[.[:alnum:]@-]+>, method=(PLAIN|LOGIN|(CRAM|DIGEST)-MD5),
rip=(::ffff:)?[:.[:digit:]]+, lip=(::ffff:)?[:.[:digit:]]+(, TLS)?$

Thanks,

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: oubliette.z at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20051012/0e2de6f2/attachment.pgp