Package: courier-imap
Version: 4.8.1.20110124-2
Severity: normal
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
With TLS enabled I get log messages that look like this:
May 5 18:23:38 sol imapd: LOGOUT, user=xxx, ip=[::ffff:xx.xx.xx.xx],
headers=0, body=0, rcvd=1080, sent=1722, time=13379, starttls=1
But this line isn't matched by any of the rules in
/etc/logcheck/ignore.server.d/courier-imap and
/etc/logcheck/ignore.server.d/courier-imap-ssl.
Could you please add a rule to match the above line? The following rule did it
for me:
\w{3} [ :0-9]{11} [._[:alnum:]-]+ imapd: (LOGOUT|TIMEOUT|DISCONNECTED),
user=[-_.@[:alnum:]]+, ip=\[[.:[:alnum:]]+\], headers=[0-9]+, body=[0-9]+,
rcvd=[0-9]+, sent=[0-9]+, time=[0-9]+, starttls=[01]$
Kind regards,
- -- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (650, 'testing'), (600, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.38-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages courier-imap depends on:
ii courier-authlib 0.63.0-3 Courier authentication library
ii courier-base 0.65.3-2 Courier mail server - base system
ii debconf 1.5.38 Debian configuration management sy
ii exim4 4.75-2 metapackage to ease Exim MTA (v4)
ii exim4-daemon-heavy [mail-tran 4.75-2 Exim MTA (v4) daemon with extended
ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib
ii libfam0 2.7.0-17 Client library to control the FAM
ii libgdbm3 1.8.3-9 GNU dbm database routines (runtime
courier-imap recommends no packages.
Versions of packages courier-imap suggests:
pn courier-doc <none> (no description available)
ii courier-imap-ssl 4.8.1.20110124-2 Courier mail server - IMAP over SS
ii mutt [imap-client] 1.5.21-4 text-based mailreader supporting M
- -- Configuration Files:
/etc/logcheck/ignore.d.server/courier-imap [Errno 13] Permission denied:
u'/etc/logcheck/ignore.d.server/courier-imap'
/etc/logcheck/violations.ignore.d/courier-imap [Errno 13] Permission denied:
u'/etc/logcheck/violations.ignore.d/courier-imap'
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=4vTQ
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
