[Logcheck-devel] Bug#318731: spamd rule does not work

[Rainer Zocholl]

Package: logcheck   
Version: "most recent stable"


Hello 

i can't block the spamd warning.

Why?
may the problem be the end of line terminated in ". $"
But using "\. $" does not help.


[23:33:42]host1:/etc/logcheck/ignore.d.server# ll spamd
-rw-r-----  1 root logcheck 789 Jul 16 23:32 spamd

[23:29:49]host1:/etc/logcheck/ignore.d.server# cat spamd
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: Argument \"RBL\" isn't numeric in addition \(\+\) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. $
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: connection from [._[:alnum:]-]+ \[[\.[:digit:]]+\] at port [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: info: setuid to [[:alnum:]-]+ succeeded$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (checking|processing) message .* for [._[:alnum:]-]+:[0-9]+\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: clean message \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: identified spam \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$


#egrep -f spamd /var/log/messages
Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244.

Why does logcheck still generate this error:

[23:34:59]host1:/etc/logcheck/ignore.d.server# su -s /bin/bash -c "/usr/sbin/logcheck -t -o " logcheck
System Events
=-=-=-=-=-=-=
Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244.


If i run "-d" i see that spamd is really included (How can
i place that output of "su" into a file?)