On Sat, Apr 23, 2016 at 8:17 AM, Tobias Margiani <[email protected]> wrote: > Thank you for your response. The decoder you posted works perfectly. > > In the prematch you included a second option which isn't necessary in my > case (but there might be logs were it is needed). > > Here are two full log entries to use in tests (I changed our domain, but > that should make no difference): > Apr 18 09:31:42 vs postfix/postscreen[13433]: NOQUEUE: reject: RCPT from > [59.37.23.174]:9011: 550 5.7.1 Service unavailable; client [59.37.23.174] > blocked using b.barracudacentral.org; from=<[email protected]>, > to=<[email protected]>, proto=ESMTP, helo=<XL-20160217NGID> > Apr 16 22:52:04 vs postfix/postscreen[20897]: NOQUEUE: reject: RCPT from > [208.100.26.230]:43746: 550 5.7.1 Service unavailable; client > [208.100.26.230] blocked using zen.spamhaus.org; > from=<[email protected]>, to=<[email protected]>, proto=ESMTP, > helo=<nmap.scanme.org> >
Thanks for these! I'll look into them shortly. > So again, thank you, and of course a PR it would be nice. > After I get a chance to look at the log samples above I'll see about a PR for this. > Another question: For similar questions would it be better to directly > create an issue or (if I have a solution) an pull request on github, or > should I first write here to see if there are better solutions? > We don't really have a set process or anything for this. If you have a solution, a PR is probably the easiest. Any tweaks can be done there. Issues are fine, but I think they're harder to use for troubleshooting purposes than the list (but I'm old and set in my ways). > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
