[Logcheck-commits] Hanspeter Kunz: postfix: enhanced "TLS library problem" rule to ignore " bad certificate"

[Martin F. Krafft]

Module: logcheck
Branch: master
Commit: d6cf211dcf2c895735e7fb926af4e262aae1cc17
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=d6cf211dcf2c895735e7fb926af4e262aae1cc17

Author: Hanspeter Kunz <hkunz at ifi.uzh.ch>
Date:   Tue Jul 29 23:30:08 2008 +0200

postfix: enhanced "TLS library problem" rule to ignore "bad certificate"

Signed-off-by: Hanspeter Kunz <hkunz at ifi.uzh.ch>

---

 debian/changelog                        |    4 +++-
 rulefiles/linux/ignore.d.server/postfix |    2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index df1e763..207718d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,7 +6,9 @@ logcheck (1.2.68) unstable; urgency=low
     - ignore closed connection messages also when connection is reset by peer.
 
   * ignore.d.server/postfix:
-    - ignore "NOQUEUE: milter-reject" messages
+    - ignore "NOQUEUE: milter-reject" messages.
+    - enhanced "TLS library problem" rule to also ignore "bad
+      certificate" errors.
 
  -- martin f. krafft <madduck at debian.org>  Thu, 17 Jul 2008 12:17:19 +0200
 
diff --git a/rulefiles/linux/ignore.d.server/postfix b/rulefiles/linux/ignore.d.server/postfix
index ecfad56..174c866 100644
--- a/rulefiles/linux/ignore.d.server/postfix
+++ b/rulefiles/linux/ignore.d.server/postfix
@@ -124,7 +124,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: (weighted check|decided action=PREPEND X-policyd-weight):  ([_[:alpha:]]+=((-)?[[:digit:].]+|ERR) )+(\(check from: [^[:space:]]+ - helo: [^[:space:]]+ - helo-domain: [^[:space:]]+\)  ([\()/_[:alnum:]]+=(-)?[[:digit:].]+ )+)*<client=[^[:space:]]+> <helo=[^[:space:]]+> <from=[^[:space:]]+> <to=[^[:space:]]+>, rate: (-)?[[:digit:].]+(; delay: [[:digit:]]+s)?$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]: cache: (purged|deleted) [^[:space:]]+ from HAM cache$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: milter unix:/var/run/clamav/clamav-milter\.ctl: can't read SMFIC_MAIL reply packet header: Connection timed out$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: TLS library problem: [[:digit:]]+:error:[[:xdigit:]]+:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message:s3_pkt\.c:[[:digit:]]+:SSL alert number 10:$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: TLS library problem: [[:digit:]]+:error:[[:xdigit:]]+:SSL routines:SSL3_READ_BYTES:sslv3 alert (unexpected message|bad certificate):s3_pkt\.c:[[:digit:]]+:SSL alert number (10|42):$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: gethostby\*\.getanswer: asked for "([-_.[:alnum:]]+)", got "\1"$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: discarding EHLO keywords:( [[:upper:]]+)+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/cleanup\[[0-9]+\]: [[:alnum:]]+: milter-discard: END-OF-MESSAGE from [-._[:alnum:]]+\[[.[:digit:]]+\]: milter triggers DISCARD action; from=<[^[:space:]]*> to=<[^[:space:]]*> proto=E?SMTP helo=<[^[:space:]]+>$