[Logcheck-devel] Rules for ssmtp package

[Jonathan Skanes]

The ssmtp package is a lightweight SMTP agent for systems which don't need a 
full blown MTA.  These log entries are for successful connections which don't 
need to fill up the logcheck reports.  Here's the relevant log entries to be 
ignored:

Mar  6 22:02:09 tiny sSMTP[11122]: Creating SSL connection to host
Mar  6 22:02:10 tiny sSMTP[11122]: SSL connection using DHE-RSA-AES256-SHA
Mar  6 22:02:12 tiny sSMTP[11122]: Sent mail for logcheck at removed.com (221 
2.0.0 smtp.removed.com closing connection) uid=115 username=logcheck 
outbytes=1429

Here are my rules:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sSMTP\[[0-9]+\]: Creating SSL connection to 
host$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sSMTP\[[0-9]+\]: SSL connection using 
[-[:alnum:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sSMTP\[[0-9]+\]: Sent mail for +*$

Thanks,
Jonathan Skanes