[Logcheck-devel] superflous localhost rule in oident rules
Elmar Hoffmann
debian-logcheck-devel-ml at elho.net
Sun May 28 21:29:42 UTC 2006
Hi,
the rule explicitly matching localhost is superflous, as the general
rule matching all hostnames/IP addresses right after it matches
localhost aswell.
The attached patch removes it.
elmar
--
.'"`. /"\
| :' : Elmar Hoffmann <elho at elho.net> ASCII Ribbon Campaign \ /
`. `' GPG key available via pgp.net against HTML email X
`- & vCards / \
-------------- next part --------------
Index: rulefiles/linux/ignore.d.server/oidentd
===================================================================
RCS file: /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.server/oidentd,v
retrieving revision 1.5
diff -u -r1.5 oidentd
--- rulefiles/linux/ignore.d.server/oidentd 18 Sep 2004 21:24:30 -0000 1.5
+++ rulefiles/linux/ignore.d.server/oidentd 28 May 2006 21:05:08 -0000
@@ -1,4 +1,3 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: Connection from localhost \(127.0.0.1\):[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: Connection from [._[:alnum:]-]+ \([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\):[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: Connection from [0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}:[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: \[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\] Successful lookup \(by forward\): [0-9]+ \([0-9]+\) , [0-9]+ : [_[:alnum:]-]+$
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060528/32a00e8d/attachment.pgp
More information about the Logcheck-devel
mailing list