[Logcheck-devel] Bug#295352: marked as done (logcheck doesn't ignore rsync's log "rsync on modulename-with-hyphen from host (ip)")
Debian Bug Tracking System
owner at bugs.debian.org
Tue Apr 19 04:33:12 UTC 2005
Your message dated Tue, 19 Apr 2005 00:02:12 -0400
with message-id <E1DNjwC-0002Fq-00 at newraff.debian.org>
and subject line Bug#295352: fixed in logcheck 1.2.38
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 15 Feb 2005 10:44:25 +0000
>From fumiya at samba.gr.jp Tue Feb 15 02:44:25 2005
Return-path: <fumiya at samba.gr.jp>
Received: from h219-110-181-023.catv02.itscom.jp (www.sfo.jp) [219.110.181.23]
by spohr.debian.org with smtp (Exim 3.35 1 (Debian))
id 1D10Bt-0008Ux-00; Tue, 15 Feb 2005 02:44:25 -0800
Received: (qmail 19538 invoked from network); 15 Feb 2005 07:10:40 -0000
Received: from unknown (HELO localhost.sugar.lan.sfo.jp) (127.0.0.1)
by localhost with SMTP; 15 Feb 2005 07:10:40 -0000
Date: Tue, 15 Feb 2005 16:10:40 +0900
Message-ID: <874qge8fin.wl%fumiya at samba.gr.jp>
From: SATOH Fumiyasu <fumiya at samba.gr.jp>
To: submit at bugs.debian.org
Subject: logcheck doesn't ignore rsync's log "rsync on modulename-with-hyphen from host (ip)"
User-Agent: Wanderlust/2.11.30 (Wonderwall) SEMI/1.14.6 (Maruoka) FLIM/1.14.6 (Marutamachi) APEL/10.6 Emacs/21.3 (i386-pc-linux-gnu) MULE/5.0 (SAKAKI)
Organization: Samba-JP / Namazu Developer / THRUST Co., Ltd.
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: rsync
Version: 2.6.3-2
Priority: wishlist
If /etc/rsyncd.conf has a [modulename-with-hyphen],
/etc/logcheck/ignore.d.server/rsync does NOT affect
logcheck and logcheck reports rsync daemon's log as:
System Events
=-=-=-=-=-=-=
Feb 15 14:02:13 foobar rsyncd[8419]: rsync on modulename-with-hyphen
from host.example.com (192.168.0.1)
Proposed patch:
--- /etc/logcheck/ignore.d.server/rsync.dist 2005-02-15 15:54:12.000000000 +0900
+++ /etc/logcheck/ignore.d.server/rsync 2005-02-15 15:54:21.000000000 +0900
@@ -1,3 +1,3 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsync\[[0-9]+\]: connect from [0-9.]{7,15} \([0-9.]{7,15}\)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: rsync on [[:alnum:]/]+ from [._[:alnum:]-]+ \([0-9.]{7,15}\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: rsync on [[:alnum:]/\-]+ from [._[:alnum:]-]+ \([0-9.]{7,15}\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ rsyncd\[[0-9]+\]: wrote [0-9]+ bytes read [0-9]+ bytes total size [0-9]+$
--
-- Name: SATOH Fumiyasu -- Home: http://www.sfo.jp (in Japanese only)
-- Mail: fumiya at net-thrust.com, samba.gr.jp, namazu.org or ...
---------------------------------------
Received: (at 295352-close) by bugs.debian.org; 19 Apr 2005 04:19:56 +0000
>From katie at ftp-master.debian.org Mon Apr 18 21:19:56 2005
Return-path: <katie at ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DNkDM-0005NC-00; Mon, 18 Apr 2005 21:19:56 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DNjwC-0002Fq-00; Tue, 19 Apr 2005 00:02:12 -0400
From: Todd Troxell <ttroxell at debian.org>
To: 295352-close at bugs.debian.org
X-Katie: $Revision: 1.55 $
Subject: Bug#295352: fixed in logcheck 1.2.38
Message-Id: <E1DNjwC-0002Fq-00 at newraff.debian.org>
Sender: Archive Administrator <katie at ftp-master.debian.org>
Date: Tue, 19 Apr 2005 00:02:12 -0400
Delivered-To: 295352-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 4
Source: logcheck
Source-Version: 1.2.38
We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:
logcheck-database_1.2.38_all.deb
to pool/main/l/logcheck/logcheck-database_1.2.38_all.deb
logcheck_1.2.38.dsc
to pool/main/l/logcheck/logcheck_1.2.38.dsc
logcheck_1.2.38.tar.gz
to pool/main/l/logcheck/logcheck_1.2.38.tar.gz
logcheck_1.2.38_all.deb
to pool/main/l/logcheck/logcheck_1.2.38_all.deb
logtail_1.2.38_all.deb
to pool/main/l/logcheck/logtail_1.2.38_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 295352 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Monday, 18 Apr 2005 23:45:00 -0500
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.38
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org>
Changed-By: Todd Troxell <ttroxell at debian.org>
Description:
logcheck - Mails anomalies in the system logfiles to the administrator
logcheck-database - A database of system log rules for the use of log checkers
logtail - Print log file lines that have not been read
Closes: 30088 295352 297995 302678 303176 304978
Changes:
logcheck (1.2.38) unstable; urgency=low
.
maks:
* Generalise postfix rule concerning network_biopair_interop.
* Add rule for ntp message about valid/infalid peers. (Closes #303661)
* Improve rules .PHONY target + add checkpo rule for the translation check.
* Add help target to debian/rules documenting the syntax.
jamie:
* Add rule in violations.ignore.d/logcheck-postfix for postgrey
(Closes: #30088)
* Modify bind notify rule for bind 9.3.x (Closes: #303176)
* Add various workstation kernel/udev rules for removable devices
(Closes: #297995)
* Modify rsync rule to match module names with '.', '-' and '_'.
Thanks to SATOH Fumiyasu <fumiya at samba.gr.jp> for the patch
(Closes: #295352)
* Add nagios rule for UNKNOWN state service notification.
* Modify postfix anvil rule for 'max connection' statistics
messages to match smtps connections too.
* Add new rules for policyd, a postfix policy daemon.
* Add more postfix rules for certificate verification failure
messages.
* Add new rules for postfix scache (connection cache server).
* Add rule for bind 9.3 'unexpected RCODE' messages.
* Modify dnsmasq rule to match '/var/run/dnsmasq/resolv.conf'
too. (Closes: #302678)
todd:
* Change lockfile location from /var/lock/logcheck to
/var/lock/logcheck/logcheck (Thanks Rainer Zocholl) to avoid
potential DoS condition. (Closes: #304978)
* Make lockfile debug messages refer to the correct files.
* Add note about dh_installlogcheck permissions. (See #302379)
Files:
a040986cd3efb1bc4b4b273ed4a0e635 703 admin optional logcheck_1.2.38.dsc
d82a1faa4198dfa7900e518f8b3581d3 94121 admin optional logcheck_1.2.38.tar.gz
520c27384c61dc06f55a9698c42b7bbf 44576 admin optional logcheck_1.2.38_all.deb
70e46d26fa902d29668d16f1f7186af4 61472 admin optional logcheck-database_1.2.38_all.deb
6931679c977e9f6025ebbd4e7ccca586 27374 admin optional logtail_1.2.38_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFCZH8R4u3oQ3FHP2YRAlR7AJ9f78c4NhflMsODo+Ov+/zR5bWNZACeJy+n
3OqLY4B4e4FxveJ3bkIPBUU=
=riHA
-----END PGP SIGNATURE-----
More information about the Logcheck-devel
mailing list