OK I have a question for those of you who are more in the know with these things I have fine tuned my logcheck.ignore but I keep getting similar enties to:
=============== Dec 17 16:33:03 raq4-01 named[1511]: bad referral (127.167.216.in-addr.arpa !< 156.127.167.216.in-addr.arpa) from [207.153.206.126].53 Dec 17 16:30:06 raq4-01 sendmail[24187]: NOQUEUE: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA =============== Both in violations and in unusual events. Can I place these both in the ignore file? Currently I just have the line: named*:Lame server on Are these things that are trivial and should be ignored, or should I be watching these events? I would also like to compare notes on logcheck.ignore files off of list. (I dont want to spam the list with my files. -Thomas Sanders _______________________________________________ cobalt-developers mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-developers
