[Logcheck-users] Ignoring postfix/mysql

[Lars Staun Knudsen]

Hi

I'm trying add new rules to logcheck, but as soon as it get dynamic
my new rules fails. For instance whenever postfix checks
user/password in my mysql-table, it's written i the log and i get a
mail. Here i tried to add new rules, but only the static works.

# Extras - Mysql Connection
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
auxprop plugin using mysql engine
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin try and connect to a host
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin trying to open db '[A-Za-z0-9_-]' on host
'[0-9].[0-9].[0-9].[0-9]'
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: begin
transaction
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin create statement from userPassword [A-Za-z0-9_-] smtp.mailfx.dk
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin doing query select [A-Za-z0-9_-] from [A-Za-z_-] where
username='[A-Za-z0-9_-]';
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin create statement from cmusaslsecretCRAM-MD5 [A-Za-z0-9_-]
smtp.mailfx.dk
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: commit
transaction

And in syslog it's mentioned every DDNS added to the zone-files and
i get a mail.

Jun  6 02:00:50 main dhcpd: if MacMini.utysket.dk. IN TXT
"314f3e7ee90c473da0b3ebb4619f97e60f" rrset exists and
MacMini.utysket.dk. IN A 172.16.0.19 rrset exists delete
MacMini.utysket.dk. IN A 172.16.0.19: success.
Jun  6 02:00:50 main dhcpd: if MacMini.utysket.dk. IN A rrset
doesn't exist delete MacMini.utysket.dk. IN TXT
"314f3e7ee90c473da0b3ebb4619f97e60f": success.
Jun  6 02:00:50 main dhcpd: removed reverse map on
19.0.16.172.in-addr.arpa.

BTW is it regular exprisions that is being used? And what if i want
to add a new service to the "logcheck/ignore.d.server" directory. Do
i just add a new txt-file and it will be included at once? So if
anyone can help me with creating new rules, i would me very happy...

Thanks in advance...


/Lars