Bug#334042: [Logcheck-devel] Bug#334042: logcheck: wishlist 2 new options

Paul van der Holst paul at mystery-land.net
Sat Oct 15 17:45:52 UTC 2005


I will add one of each below
proftpd:

1 <hostname> proftpd: <hostname> (<user ip>) - FTP session opened.
1 <hostname> proftpd: <hostname> (<user ip>) - USER got: Login successful.
1 <hostname> proftpd: <hostname> (<user ip>) - FTP session closed.

imap:

47 <hostname> imaplogin: LOGIN, user=<email>, ip=[::ffff:<ip>], protocol=IMAP
27 <hostname> imaplogin: LOGOUT, user=<email>, ip=[::ffff:<ip>], headers=0, body=0, time=0

qmail-scanner:

1 <hostname> qmail-scanner: Clear:RC:0(<ip>):SA:0(-2.5/5.0): 1.737037 593 <email> <email> <message>) <434F6141.6090607 at mystery-land.net> 1129275696.5133-0.only4clans.com:17 orig-only4clans.com11292756967505131:593

spamd:

1 <hostname> spamd: spamd: clean message (-2.5/5.0) for qscand:1011 in 1.7 seconds, 593 bytes.
1 <hostname> spamd: spamd: result: . -2 - AWL,BAYES_00 

Hopefully you know something for this

All above are allmost the same.. :) (depends from what mail or what ever)

paul


Jamie L. Penman-Smithson schreef:

>On Sat, 2005-10-15 at 09:31 +0200, Paul van der Holst wrote:
>  
>
>>My server runs all stuff, also a mailserver (qmail + vpopmail etc). When I
>>receive the update thru mail, it is full with:
>>- imaplogin (LOGIN/LOGOUT)
>>- spamd
>>- qmail-scanner
>>    
>>
>
>Which log messages are not being ignored?
>
>-j
>  
>





More information about the Logcheck-devel mailing list