[Logcheck-devel] Bug#408700: logcheck-database: a first set of rules for policyd-weight

[Armin Berres]

Package: logcheck-database
Severity: wishlist
Tags: patch

Please consider the attached file as ignore.d.server/policyd-weight.
It is a first set of rules which matches most of the output generated by
policyd-weight.

I hope the rules are qualitative ok for you. I not just tell me and I'll try to
fix them.

/Armin

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.18-99
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
-------------- next part --------------
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: decided action=PREPEND X-policyd-weight: using cached result; rate: (-)?[[:digit:].]+
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: decided action=(450 |550) (Mail appeared to be SPAM or forged. Ask your Mail/DNS-Administrator to correct HELO and DNS MX settings or to get removed from DNSBLs(; in [^[:space:]]+)*|Your MTA is listed in too many DNSBLs; check [^[:space:]]+) $
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: (weighted check|decided action=PREPEND X-policyd-weight):  ([_[:alpha:]]+=(-)?[[:digit:].]+ )+\(check from: [^[:space:]]+ - helo: [^[:space:]]+ - helo-domain: [^[:space:]]+\)  ([\()/_[:alpha:]]+=(-)?[[:digit:].]+ )+<client=[^[:space:]]+> <helo=[^[:space:]]+> <from=[^[:space:]]+> <to=[^[:space:]]+>, rate: (-)?[[:digit:].]+ $