[Logcheck-devel] Bug#536071: logcheck-database: add exlusion rules for IPv6 in bind9

David I. Lehn dlehn at debian.org
Tue Jul 28 22:30:11 UTC 2009


Radek Antoniuk <wardenik at gmail.com> wrote:
> Jul  7 12:54:12 frodo named[12633]: network unreachable resolving 'validator.w3.org/A/IN': 2001:500:c::1#53
> Jul  7 12:54:12 frodo named[12633]: connection refused resolving 'xklonos.cal.pl/A/IN': 87.98.162.72#53

Here are the two rules I just started using.  These messages are of no
use to me but I have no idea if they are unimportant enough to filter
out for everyone.

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: network unreachable resolving '[^[:space:]]+': [.:[:xdigit:]]+#[[:digit:]]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: connection refused resolving '[^[:space:]]+': [.:[:xdigit:]]+#[[:digit:]]+$

-dave






More information about the Logcheck-devel mailing list