changes to rulefiles/linux/ignore.d.server/dovecot: * removed obsolete rule for deliver (that matched only a subset of patterns) * added support for numerical msgids * ignore discarded duplicate forwards * don't care about spaces between msgid and :
Signed-off-by: Hanspeter Kunz <hk...@ifi.uzh.ch>
---
rulefiles/linux/ignore.d.server/dovecot | 3 +--
1 files changed, 1 insertions(+), 2 deletions(-)
diff --git a/rulefiles/linux/ignore.d.server/dovecot
b/rulefiles/linux/ignore.d.server/dovecot
index d20953f..ac4e8e7 100644
--- a/rulefiles/linux/ignore.d.server/dovecot
+++ b/rulefiles/linux/ignore.d.server/dovecot
@@ -1,6 +1,5 @@
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login:
Disconnected \[[.:[:xdigit:]]+\]$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\):
msgid=<[^[:space:]]+>( \((added by [^[:space:]]+|
sfid-[_[:xdigit:]]+)\))?: saved mail to [-_.[:alnum:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\):
msgid=<[^[:space:]]+>?( \((added by [^[:space:]]+|
sfid-[_[:xdigit:]]+)\))?: (saved mail to [-_.[:alnum:]]+|forwarded to
<[^[:space:]]+>)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\):
msgid=(<[^[:space:]]+>?|[[:alnum:]]+)( \((added by [^[:space:]]+|
sfid-[_[:xdigit:]]+)\))?[[:space:]]*: (saved mail to
[-_.[:alnum:]]+|(discarded duplicate forward|forwarded) to
<[^[:space:]]+>)$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\)
authentication failure; logname= uid=0 euid=0 tty=dovecot
ruser=([...@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\)
check pass; user unknown$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_unix
\(dovecot:[[:alnum:]]+\): authentication failure; logname= uid=0 euid=0
tty=dovecot ruser= rhost=$
--
1.5.6.5
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Logcheck-devel mailing list Logcheck-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
