[Logcheck-commits] Shawn Heisey: Extend bind rules to match when views are in use

Martin F. Krafft madduck at alioth.debian.org
Sat Apr 26 15:11:19 UTC 2008


Module: logcheck
Branch: master
Commit: 46529406dc61299b41647340de6f458bed06c315
URL:    http://git.debian.org/?p=logcheck/logcheck.git/?a=commit;h=46529406dc61299b41647340de6f458bed06c315

Author: Shawn Heisey <debian at elyograg.org>
Date:   Sat Apr 26 08:01:46 2008 +0400

Extend bind rules to match when views are in use

---

 debian/changelog                     |    6 +++++-
 rulefiles/linux/ignore.d.server/bind |    6 +++---
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 01b4ec3..97892bc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -102,7 +102,11 @@ logcheck (1.2.64) unstable; urgency=low
     - fix spamd processing message pattern when msgid is unknown; thanks to
       Michal Čihař for the patch (closes: #471936).
 
- -- martin f. krafft <madduck at debian.org>  Wed, 09 Apr 2008 15:57:48 +0200
+  * ignore.d.server/bind
+    - Fix up rules to match when views are in use; thanks Shawn Heisey
+      (closes: #477932).
+
+ -- martin f. krafft <madduck at debian.org>  Sat, 26 Apr 2008 08:02:11 +0400
 
 logcheck (1.2.63) unstable; urgency=low
 
diff --git a/rulefiles/linux/ignore.d.server/bind b/rulefiles/linux/ignore.d.server/bind
index 249c2a6..6bbfa8e 100644
--- a/rulefiles/linux/ignore.d.server/bind
+++ b/rulefiles/linux/ignore.d.server/bind
@@ -1,8 +1,8 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN: transferred serial [0-9]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client [.:[:xdigit:]]+#[[:digit:]]+: )?received notify for zone '[._[:alnum:]-]+'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN(/[._[:alnum:]-]+)?: transferred serial [0-9]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client [.:[:xdigit:]]+#[[:digit:]]+: )?(view [._[:alnum:]-]+: )?received notify for zone '[._[:alnum:]-]+'$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: unexpected RCODE \((FORMERR|SERVFAIL|NXDOMAIN|NOTIMP|REFUSED|YXDOMAIN|YXRRSET|NXRRSET|NOTAUTH|NOTZONE|BADVERS|<rcode [[:digit:]]+>|[[:digit:]]+)\) resolving '[^[:space:]]+': [.:[:xdigit:]]+#[[:digit:]]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: FORMERR resolving '[^[:space:]]+': [.:[:xdigit:]]+#[[:digit:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN: Transfer started.$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone [._[:alnum:]-]+/IN(/[._[:alnum:]-]+)?: Transfer started.$
 ^\w{3} [ :0-9]{11} [-._[:alnum:]]+ named\[[0-9]+\]: client [.:[:xdigit:]]+#[[:digit:]]+: view (localhost|any|slave): query: [-._[:alnum:]]+ IN (CNAME|A6|AAAA|A|MX|PTR|TXT|NS|SOA|SSHFP) [-+](E?)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client [.:[:xdigit:]]+#[[:digit:]]+: )?notify question section contains no SOA$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: journal file [-./_[:alnum:]]+ does not exist, creating it$




More information about the Logcheck-commits mailing list