Martin Lohmeier wrote:
> This one will not cover all cases.
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: NOQUEUE:
> reject: RCPT from
> [._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]: 554
> <[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]>:
> Client host rejected: Access denied; from=<.*> to=<.*> proto=SMTP
> helo=<.*>$
>
> But this will do.This rule still needed some improvement and it need to go into /etc/logcheck/violations.ignore.d/logcheck-postfix I've opened a ticked in the BTS [1] bye, Martin [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368313 -- Powered by Debian GNU / Linux
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Logcheck-devel mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
