[Logcheck-devel] Opinion on #742069

[Alberto Gonzalez Iniesta]

On Thu, Apr 03, 2014 at 11:31:42AM +0200, Martín Ferrari wrote:
> On 02/04/14 19:30, Alberto Gonzalez Iniesta wrote:
> > Hi, I was looking at fixing #742069, since it's quite recent. But I have
> > doubts on the right solution.
> > 
> > The thing is, if you enable smtps in postix (just un-commenting some
> > lines in the shipped master.cf), logs from smtps will add 'smtps/' to
> > the daemon name. So rules like this:
> > 
> > .... postfix/smtpd\[[[:digit:]]+\]: ....
> > 
> > Should be changed to this:
> > 
> > .... postfix/(smtps/)?smtpd\[[[:digit:]]+\]: ...
> 
> On a similar note. I have already accumulated a few regexes to add to
> postfix. In my case, I have plenty of lines for
> postfix/submission/smtpd. I don't know how's postfix criteria to create
> these log lines, but it seems it is using the port name. So maybe it
> should be postfix/([^[:space]]+/)?smtpd

Sounds OK to me.


-- 
Alberto Gonzalez Iniesta    | Formación, consultoría y soporte técnico
mailto/sip: agi at inittab.org | en GNU/Linux y software libre
Encrypted mail preferred    | http://inittab.com

Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D  4BF2 009B 3375 6B9A AA55