Hi, the rule explicitly matching localhost is superflous, as the general rule matching all hostnames/IP addresses right after it matches localhost aswell. The attached patch removes it.
elmar -- .'"`. /"\ | :' : Elmar Hoffmann <[EMAIL PROTECTED]> ASCII Ribbon Campaign \ / `. `' GPG key available via pgp.net against HTML email X `- & vCards / \
Index: rulefiles/linux/ignore.d.server/oidentd
===================================================================
RCS file: /cvsroot/logcheck/logcheck/rulefiles/linux/ignore.d.server/oidentd,v
retrieving revision 1.5
diff -u -r1.5 oidentd
--- rulefiles/linux/ignore.d.server/oidentd 18 Sep 2004 21:24:30 -0000
1.5
+++ rulefiles/linux/ignore.d.server/oidentd 28 May 2006 21:05:08 -0000
@@ -1,4 +1,3 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: Connection from
localhost \(127.0.0.1\):[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: Connection from
[._[:alnum:]-]+ \([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\):[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]: Connection from
[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}:[0-9]{1,5}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ oidentd\[[0-9]+\]:
\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\] Successful lookup \(by
forward\): [0-9]+ \([0-9]+\) , [0-9]+ : [_[:alnum:]-]+$
signature.asc
Description: Digital signature
_______________________________________________ Logcheck-devel mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
