[Logcheck-commits] r1265 - in logcheck/trunk: debian
rulefiles/linux/violations.ignore.d
madduck at users.alioth.debian.org
madduck at users.alioth.debian.org
Thu Oct 19 07:47:30 UTC 2006
Author: madduck
Date: 2006-10-19 07:47:29 +0000 (Thu, 19 Oct 2006)
New Revision: 1265
Modified:
logcheck/trunk/debian/changelog
logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix
Log:
* violations.ignore.d/logcheck-postfix: ignore generic 554 messages during
CONNECT; thanks to Martin Lohmeier (closes: #373174).
Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog 2006-10-19 07:41:52 UTC (rev 1264)
+++ logcheck/trunk/debian/changelog 2006-10-19 07:47:29 UTC (rev 1265)
@@ -10,8 +10,10 @@
ignore checking messages (closes: #382805).
* ignore.d.server/kernel: also ignore outgoing iptables log entries
(closes: #377381).
+ * violations.ignore.d/logcheck-postfix: ignore generic 554 messages during
+ CONNECT; thanks to Martin Lohmeier (closes: #373174).
- -- martin f. krafft <madduck at debian.org> Thu, 19 Oct 2006 09:41:21 +0200
+ -- martin f. krafft <madduck at debian.org> Thu, 19 Oct 2006 09:46:43 +0200
logcheck (1.2.49~unreleased.2) UNRELEASED; urgency=low
Modified: logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix
===================================================================
--- logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix 2006-10-19 07:41:52 UTC (rev 1264)
+++ logcheck/trunk/rulefiles/linux/violations.ignore.d/logcheck-postfix 2006-10-19 07:47:29 UTC (rev 1265)
@@ -26,6 +26,6 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:upper:]0-9]+: reject: RCPT from [^[:space:]]+: [45][0-9][0-9] <[^[:space:]]+>: Client host rejected: Greylisted for [0-9]+ (seconds|minutes)( \(see http://isg.ee.ethz.ch/tools/postgrey/help/[.[:alnum:]-]+.html\))?; from=<[^[:space:]]+> to=<[^[:space:]]+> proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/qmgr\[[0-9]+\]: [[:alnum:]]+: from=<[^[:space:]]*>, size=[0-9]+, nrcpt=[0-9]+ \(queue active\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)* relay=local, delay=[0-9]+, status=sent \(delivered to command: /var/lib/mailman/mail/mailman admin [._[:alnum:]-]+\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE: reject: RCPT from [^[:space:]]+: 554 <[^[:space:]]+>: Client host rejected: Access denied; from=<[^[:space:]]+> to=<[^[:space:]]+> proto=E?SMTP helo=<[^[:space:]]+>$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE: reject: [[:upper:]]+ from [^[:space:]]+: 554 <[^[:space:]]+>: Client host rejected: Access denied;( from=<[^[:space:]]+> to=<[^[:space:]]+>)? proto=E?SMTP( helo=<[^[:space:]]+>)?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: [-._[:alnum:]]+\[[.[:digit:]]+\]: SASL (LOGIN|PLAIN|(DIGEST|CRAM)-MD5|APOP) authentication failed:?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: SASL authentication failure: Password verification failed$
More information about the Logcheck-commits
mailing list