Package: amavisd-new
Version: 1:2.6.1.dfsg-1
Followup-For: Bug #498659
Hi,
I've just upgraded my box to lenny and logcheck report for amavis are
really verbose. I'm expanding previously posted correction with:
- Passed (CLEAN|SPAM)
I deliver spam
- Hits: (-?[.[:digit:]]*)+
Hits can be positive
- ( OK id=[-[:alnum:]]+)?
Discussed previously
- ( quarantine: (virus|badh)-[-+[:alnum:]]+,)?
I don't use quarantine
luca
-- System Information:
Debian Release: 5.0
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.26.5
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
>From 0b2469c92150a1e10abccbf3ebaab816326feadf Mon Sep 17 00:00:00 2001
From: Luca Bigliardi <[email protected]>
Date: Thu, 19 Feb 2009 01:25:04 +0100
Subject: [PATCH] Fix logcheck regexp for amavis
---
logcheck/ignore.d.server/amavisd-new | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/logcheck/ignore.d.server/amavisd-new
b/logcheck/ignore.d.server/amavisd-new
index e794565..0bd47de 100644
--- a/logcheck/ignore.d.server/amavisd-new
+++ b/logcheck/ignore.d.server/amavisd-new
@@ -1,5 +1,5 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> ->
<[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+ OK id=[-[:alnum:]]+, [[:digit:]]+ ms$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed (INFECTED \([-._[:alnum:]]+\)|BAD-HEADER),(
\[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>, quarantine:
(virus|badh)-[-+[:alnum:]]+, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+ OK id=[-[:alnum:]]+, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed (CLEAN|SPAM),( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> ->
<[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-?[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed (INFECTED \([-._[:alnum:]]+\)|BAD-HEADER),(
\[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>,( quarantine:
(virus|badh)-[-+[:alnum:]]+,)? Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
[-+[:alnum:]]+, Hits: (-?[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) NOTICE: Not sending DSN in response to bulk mail from <[^.]*>
containing [[:upper:] ]+, mail intentionally dropped$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) INFO: unfolded [[:digit:]]+ illegal all-whitespace
continuation lines$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) WARN: address modified \((sender|recipient)\): <[^>]+> ->
<[^>]+>$
--
1.5.6.5
