[Logcheck-devel] Bug#382805: logcheck-database: rule to ignore "checking message" (spamd)

[Hanspeter Kunz]

Package: logcheck-database
Version: 1.2.47
Severity: normal

I get a lot of "System Events" like

Aug 13 15:20:38 irulan spamd[13278]: spamd: checking message
<20060813132013.6EF8913E7A at localhost.localdomain> for hkunz:1000

or

Aug 13 15:22:39 irulan spamd[13278]: spamd: checking message
<20060813131956.GA28942 at lapse.madduck.net> aka
<yIC7DC.A.NCF.Gcy3EB at murphy> for hkunz:1000

please consider to add the following rule to ignore.d.server/spamd:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (spamd: )?(checking|
processing) message <[^[:space:]]+>( aka [^[:space:]]+>)? for
[._[:alnum:]-]+:[0-9]+(\.)?$

additionally you could also update the 3rd rule of
violations.d.ignore/logcheck-spamd.

cheers,
Hp.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.5.3      Debian configuration
management sy

logcheck-database recommends no packages.

-- debconf information:
  logcheck-database/conffile-cleanup: false
  logcheck-database/standard-rename-note: