[Logcheck-users] Why am I seeing a log line?

Yves Goergen nospam.list at unclassified.de
Sat Jan 6 11:26:37 CET 2007


On 23.12.2006 21:10 CE(S)T, Yves Goergen wrote:
> Now I keep getting reports with lines like these:
> 
>> Dec 22 03:11:16 mond spamd[26994]: spamd: result: Y 21 - BAYES_99,BOTNET,DATE_IN_PAST_03_06,RCVD_FORGED_WROTE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL scantime=4.3,size=1877,user=nobody,uid=0,required_score=5.0,rhost=mond,raddr=127.0.0.1,rport=32924,mid=<01c7256e$733bd600$6c822ecf at lazilyattackers>,bayes=1,autolearn=spam
>> Dec 12 03:05:28 mond spamd[4736]: spamd: result: . 0 - AWL,BAYES_00,HTML_90_100,HTML_MESSAGE,HTML_TITLE_EMPTY,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT scantime=4.5,size=56886,user=nobody,uid=0,required_score=5.0,rhost=mond,raddr=127.0.0.1,rport=47854,mid=<20061212020506.7BFA11E4320 at www.scooter-attack.com>,bayes=1.21014309684142e-14,autolearn=no
>> Dec  8 02:09:55 mond spamd[12414]: spamd: result: Y 18 - BAYES_99,RCVD_IN_DSBL,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,SARE_MLB_Stock1,SARE_MLB_Stock4,SARE_PROLOSTOCK_SYM1,STOCK_NAME_FVGT1 scantime=2.4,size=1994,user=nobody,uid=0,required_score=5.0,rhost=mond,raddr=127.0.0.1,rport=46164,mid=<01c71a65$90b50530$6c822ecf at Gothicscounterattacks>,bayes=1,autolearn=spam

Could anybody please tell me whether it's possible to ignore these lines
with logcheck rules and what these rules would be? I can't get it working.

Or is there another place where more people are available than this
list? (I feel like I'm a bit alone here.)

-- 
Yves Goergen "LonelyPixel" <nospam.list at unclassified.de>
Visit my web laboratory at http://beta.unclassified.de



More information about the Logcheck-users mailing list