[Logcheck-devel] Bug#404852: postfix-mysql corrections

Andreas Beckmann beckmann at informatik.uni-halle.de
Tue Mar 6 02:03:17 UTC 2007


Hi,

here are some corrections/additions for the newly added postfix-mysql
rules (from my own ruleset, hopefully to be retired someday):

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin
doing query select password from [_[:alnum:]]+ where
[_[:alnum:]]+='[._@[:alnum:]-]+';?$

* do not hardcode table and column names ('password' does not seem a
variable column name but a fixed string)
* the trailing semicolon is optional (I've seen this message with and
without ...)

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin
create statement from
(userPassword|cmusaslsecret(PLAIN|CRAM-MD5|DIGEST-MD5)) [._[:alnum:]-]+
[.[:alnum:]-]+$

* the plugin creates more statements ...
* the trailing $ was missing


Andreas





More information about the Logcheck-devel mailing list