Hi,
I've just updated one of my boxes to lenny, and I also got these
messages clogging up my logcheck reports. :)
I believe this is because the regex in question seems to expect a string
"OK id=[-[:alnum:]]+" in the log message, which never occurs for me,
and only seems to exist in amavisd itself for an optional DKIM identity
part:
[remote_mta_smtp_response|[~%x|["queued as ([0-9A-Z]+)$"]|["%1"]|["%0"]]|/]#
#[? [:header_field|Subject]||, Subject: [:dquote|[:header_field|Subject|100]]]#
#[? [:header_field|From] ||, From: [:uquote|[:header_field|From|100]]\
#[? [:dkim|author] || (dkim:AUTHOR)]]#
#[? [:useragent|name] ||, [:useragent|name]: [:uquote|[:useragent|body]]]#
#[? %#T ||, Tests: \[[%T|,]\]]#
#[:supplementary_info|SCTYPE|, shortcircuit=%%s]#
#[:supplementary_info|AUTOLEARN|, autolearn=%%s]#
#[? [:supplementary_info|LANGUAGES] ||,
languages=[:uquote|[:supplementary_info|LANGUAGES]]]#
#[? [:supplementary_info|RELAYCOUNTRY] ||,
relaycountry=[:uquote|[:supplementary_info|RELAYCOUNTRY]]]#
#[? [:supplementary_info|ASN] ||, asn=[:uquote|[:supplementary_info|ASN]
[:supplementary_info|ASNCIDR]]]#
[? [:dkim|identity] ||, dkim_id=[:dkim|identity]]#
, %y ms#
]
So I guess the simplest solution is to make the "OK id=[-[:alnum:]]+"
part optional, as per the following diff:
--- amavisd-new.org 2008-07-26 09:29:05.000000000 +0200
+++ amavisd-new 2008-10-15 22:29:01.000000000 +0200
@@ -1,5 +1,5 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> ->
<[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+ OK id=[-[:alnum:]]+, [[:digit:]]+ ms$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed (INFECTED \([-._[:alnum:]]+\)|BAD-HEADER),(
\[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>, quarantine:
(virus|badh)-[-+[:alnum:]]+, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+ OK id=[-[:alnum:]]+, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> ->
<[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed (INFECTED \([-._[:alnum:]]+\)|BAD-HEADER),(
\[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>, quarantine:
(virus|badh)-[-+[:alnum:]]+, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) NOTICE: Not sending DSN in response to bulk mail from <[^.]*>
containing [[:upper:] ]+, mail intentionally dropped$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) INFO: unfolded [[:digit:]]+ illegal all-whitespace
continuation lines$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) WARN: address modified \((sender|recipient)\): <[^>]+> ->
<[^>]+>$
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
