[Logcheck-devel] Bug#530591: logcheck-database: dovecot : NTLM method messages are not ignored

[Olivier Bonvalet]

Package: logcheck-database
Version: 1.2.54
Severity: wishlist

Actualy there is rules to ignores lot of Dovecot messages, including method PLAIN, LOGIN, CRAM-MD5 and DIGEST-MD5.
For example this one :
    ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Login: user=<[-_.@[:alnum:]]+>, method=(PLAIN|plain|LOGIN|login|(CRAM|DIGEST)-MD5|(cram|digest)-md5), rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]+(, (TLS( handshake)?|secured))?$

Can you please add the NTLM in the list (used by Microsoft clients) ?

The result for this rule will be :
    ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Login: user=<[-_.@[:alnum:]]+>, method=(PLAIN|plain|LOGIN|login|(CRAM|DIGEST)-MD5|(cram|digest)-md5|NTLM|ntlm), rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]+(, (TLS( handshake)?|secured))?$

Thanks

-- System Information:
Debian Release: 4.0
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.29.3-dae-core2
Locale: LANG=fr_FR at euro, LC_CTYPE=fr_FR at euro (charmap=UTF-8) (ignored: LC_ALL set to fr_FR.UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]        1.5.11etch2 Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information:
  logcheck-database/conffile-cleanup: false