[Logcheck-devel] Bug#382805: logcheck-database: rule to ignore "checking message" (spamd)
Hanspeter Kunz
hkunz at ifi.unizh.ch
Sun Aug 13 14:07:04 UTC 2006
Package: logcheck-database
Version: 1.2.47
Severity: normal
I get a lot of "System Events" like
Aug 13 15:20:38 irulan spamd[13278]: spamd: checking message
<20060813132013.6EF8913E7A at localhost.localdomain> for hkunz:1000
or
Aug 13 15:22:39 irulan spamd[13278]: spamd: checking message
<20060813131956.GA28942 at lapse.madduck.net> aka
<yIC7DC.A.NCF.Gcy3EB at murphy> for hkunz:1000
please consider to add the following rule to ignore.d.server/spamd:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (spamd: )?(checking|
processing) message <[^[:space:]]+>( aka [^[:space:]]+>)? for
[._[:alnum:]-]+:[0-9]+(\.)?$
additionally you could also update the 3rd rule of
violations.d.ignore/logcheck-spamd.
cheers,
Hp.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.5.3 Debian configuration
management sy
logcheck-database recommends no packages.
-- debconf information:
logcheck-database/conffile-cleanup: false
logcheck-database/standard-rename-note:
More information about the Logcheck-devel
mailing list