[Logcheck-devel] Bug#376968: logcheck-database: postfix helo restriction

[Martin Lohmeier]

Package: logcheck-database
Version: 1.2.44
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

When using postfix smtpd_helo_restrictions / check_helo_access, the lines
attched in 'postfix-helo.log' appear.

The following rule can be used to filter them out:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE: reject: HELO from [^[:space:]]+: 553 <[^[:space:]]+>: Helo command rejected: .*; proto=E?SMTP helo=<[^[:space:]]+>$

bye, Martin

- -- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (900, 'testing'), (700, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16.1
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFErEASOvJj+wS6JuIRAsccAJ9R8cr6alhra0o5xszWih7WmHbwZwCg00pB
eDmMBND78boQb3x9Bb7ZliQ=
=FT0T
-----END PGP SIGNATURE-----
-------------- next part --------------
Jul  5 12:12:04 djinn01 postfix/smtpd[24767]: NOQUEUE: reject: HELO from unknown[211.228.178.249]: 553 <80.190.250.190>: Helo command rejected: You are not me!; proto=SMTP helo=<80.190.250.190>
Jul  5 12:29:07 djinn01 postfix/smtpd[25596]: NOQUEUE: reject: HELO from unknown[220.84.200.61]: 553 <80.190.250.190>: Helo command rejected: You are not me!; proto=SMTP helo=<80.190.250.190>
Jul  5 12:30:01 djinn01 postfix/smtpd[25596]: NOQUEUE: reject: HELO from unknown[219.241.91.88]: 553 <80.190.250.190>: Helo command rejected: You are not me!; proto=SMTP helo=<80.190.250.190>
Jul  5 12:30:03 djinn01 postfix/smtpd[25596]: NOQUEUE: reject: HELO from unknown[221.217.252.229]: 553 <80.190.250.190>: Helo command rejected: You are not me!; proto=SMTP helo=<80.190.250.190>