[Logcheck-devel] Bug#446356: does not ignore bind enforced delegation-only messages

[Elmar Hoffmann]

Package: logcheck-database
Version: 1.2.62
Severity: normal
Tags: patch

When using the delegation-only feature of bind, it logs any offending
lookup that it forced to NXDOMAIN.
the following rule should be added to ignore.d.server/bind to ignore these:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: enforced delegation-only for '[[:alnum:]]+' \([._[:alnum:]-]+/(A|AAAA)/IN\) from [0-9a-f.:]+#[0-9]+$

I had this in ignore.d.server/local-bind for quite a while and had to
add the AAAA now which reminded me to submit it. :)

elmar

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- debconf information excluded

-- 

 .'"`.                                                            /"\
| :' :   Elmar Hoffmann <elho at elho.net>    ASCII Ribbon Campaign  \ /
`. `'    GPG key available via pgp.net        against HTML email   X
  `-                                                    & vCards  / \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20071012/1845a5eb/attachment.pgp