Hi, I would like to have the following rule added to /etc/logcheck/ignore.d.server/postfix:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: NOQUEUE:
reject: RCPT from
[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]: 554
<[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]>:
Client host rejected: Access denied; from=<.*> to=<.*> proto=SMTP
helo=<[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}>$
The file that should be ignored:
May 15 19:33:06 djinn01 postfix/smtpd[22807]: NOQUEUE: reject: RCPT from
pool-71-111-148-254.ptldor.dsl-w.verizon.net[71.111.148.254]: 554
<pool-71-111-148-254.ptldor.dsl-w.verizon.net[71.111.148.254]>: Client
host rejected: Access denied; from=<[EMAIL PROTECTED]>
to=<[EMAIL PROTECTED]> proto=SMTP helo=<69.179.192.38>
I've created a rule in postfix's access list to block *verizon.net, so
it is not necessary to appear in logcheck's report.
bye, Martin
--
Powerd by Debian GNU Linux
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Logcheck-devel mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
