[Logcheck-devel] Bug#327088: Dovecot rules doesn't work with ipv6
Marco Nenciarini
mnencia at prato.linux.it
Wed Sep 7 14:44:32 UTC 2005
Package: logcheck
Version: 1.2.41
Severity: normal
Tags: patch
If you enable ipv6 in dovecot's config, it produces logs with ipv6 addresses within.
>From my mail.log:
Sep 7 14:03:59 lorien pop3-login: Login: xxxxxxxx at prato.linux.it [::ffff:11.22.33.44]
Patch attached.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=it_IT.UTF-8 at euro, LC_CTYPE=it_IT.UTF-8 at euro (charmap=UTF-8)
Versions of packages logcheck depends on:
ii adduser 3.63 Add and remove users and groups
ii cron 3.0pl1-86 management of regular background p
ii debconf [debconf 1.4.30.13 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii grep 2.5.1.ds1-4 GNU grep, egrep and fgrep
ii lockfile-progs 0.1.10 Programs for locking and unlocking
ii logcheck-databas 1.2.41 database of system log rules for t
ii logtail 1.2.41 Print log file lines that have not
ii mailx 1:8.1.2-0.20040524cvs-4 A simple mail user agent
ii postfix [mail-tr 2.1.5-9 A high-performance mail transport
ii sysklogd [system 1.4.1-17 System Logging Daemon
-- debconf information excluded
-------------- next part --------------
--- dovecot.orig 2005-08-22 21:34:29.000000000 +0200
+++ dovecot 2005-09-07 15:55:29.353650053 +0200
@@ -1,3 +1,3 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login: [.[:alnum:]@-]+ \[[0-9.]+\]$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Disconnected \[[0-9.]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login: [.[:alnum:]@-]+ \[[0-9a-f.:]+\]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Disconnected \[[0-9a-f.:]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)\([^[:space:]]+\): File isn't in mbox format: [^[:space:]]+$
More information about the Logcheck-devel
mailing list