Package: logcheck-database
Version: 1.2.69
Severity: normal
Tags: patch
Hi,
sometimes dovecot's deliver generates messages like this
Aug 4 06:56:11 bc-bd deliver(bd): msgid=: saved mail to INBOX.maybespam
e.g. without a msgid. These messages are not filtered by logcheck.
regards
Stefan
-- System Information:
Debian Release: 5.0.2
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.16.33-xenU (SMP w/2 CPU cores)
Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash
-- no debconf information
--- /tmp/dovecot 2009-08-04 09:24:02.000000000 +0000
+++ ignore.d.server/dovecot 2009-08-04 09:24:34.000000000 +0000
@@ -14,7 +14,7 @@
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check
pass; user unknown$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth:
pam_unix\(dovecot:[[:alnum:]]+\): check pass; user unknown$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\):
msgid=<[^[:space:]]+>( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\))?:
saved mail to [-_.[:alnum:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\):
msgid=<[^[:space:]]+>?( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\))?:
(saved mail to [-_.[:alnum:]]+|forwarded to <[^[:space:]]+>)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\):
msgid=(<[^[:space:]]+>|:)?( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\))?:
(saved mail to [-_.[:alnum:]]+|forwarded to <[^[:space:]]+>)$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot:
auth-worker\([-_.[:alnum:]]+\): (pg|my)sql: Connected to [-_.[:alnum:]]+
\([-_.[:alnum:]]+\)$
# see #396760
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth\([[:alnum:]]+\): client
in: AUTH
[[:digit:]]+[[:space:]]+(PLAIN|plain|LOGIN|login|(CRAM|DIGEST)-MD5|(cram|digest)-md5)[[:space:]]+service=IMAP[[:space:]]+(secured
)?lip=[.:[:xdigit:]]+[[:space:]]+rip=[.:[:xdigit:]]+[[:space:]]+resp=<hidden>$
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
