Bug#368313: [Logcheck-devel] Bug#368313: logcheck-database: new postfix violations ignore rule

[Jamie L. Penman-Smithson]

package logcheck-database
tags 368313 pending
thanks

On 21 May 2006, at 12:45, Martin Lohmeier wrote:
> I'd like to add the following rule to /etc/logcheck/ 
> violations.ignore.d/logcheck-postfix :
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]:  
> NOQUEUE: reject: RCPT from [._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\. 
> [0-9]{1,3}\.[0-9]{1,3}\]: 554 <[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9] 
> {1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]>: Client host rejected: Access  
> denied; from=<.*> to=<.*> proto=(SMTP|ESMTP) helo=<.*>$
>
> The attached file contain a few line that should be ignored.

I've added the following rule to violations.ignore.d/logcheck- 
postfix, which matches the log messages you provided:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE:  
reject: RCPT from [^[:space:]]+: 554 <[^[:space:]]+>: Client host  
rejected: Access denied; from=<[^[:space:]]+> to=<[^[:space:]]+>  
proto=E?SMTP helo=<[^[:space:]]+>$

It'll be included in the next release.

Thanks for your bug report,

-j
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060604/a0a92c02/attachment.pgp