Bug#318731: [Logcheck-devel] Bug#318731: spamd rule does not work

[Jamie L. Penman-Smithson]

package logcheck
merge 317642 318731
tags 318731 wontfix
thanks

On Sun, 2005-07-17 at 12:33 +0200, Rainer Zocholl wrote:
> Package: logcheck   
> Version: "most recent stable"

Use apt to find the version number, "most recent stable" is pretty
useless.

Don't open multiple bug reports about the same issue. There is already
#317642. This isn't a problem with logcheck, it's a problem with _your
own_ rules, therefore this isn't a bug and the BTS isn't really the best
place, there's the logcheck-users mailing list which would be better.

Read README.logcheck-database, it explains, in detail, how to write
rules and how to test them correctly.

> i can't block the spamd warning.
> 
> Why?

Your rule has a trailing space, since all log messages have trailing
spaces stripped before they are processed, your rule will never match
anything. Removing the trailing space should fix the problem:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: Argument \"RBL\"
isn't numeric in addition \(\+\)
at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244.$

Finally, this message indicates a _PROBLEM_ with your spamassassin
configuration, ignoring it _will not_ make the problem disappear.
Ignoring errors is not a good strategy. See bug #3853 in SA's bugzilla
(which I found within 5 seconds using Google) which was the result of
misconfiguration:

> ------- Additional Comments From felicity at kluge.net  2004-10-01 10:05
> -------
> This type of issue has always been something like:
> 
> score FOO_RULE RBL 3
> 
> somewhere in the configuration files.  Could be in any of
> the /etc/mail/spamassassin/*.cf files, or in
> user_prefs, or anywhere your SA installation gets configuration data
> from.

Fix the problem in your SA configuration.

-- 
-Jamie L. Penman-Smithson <jamie at silverdream.org>
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: oubliette.z at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050717/ee124fd1/attachment.pgp