logcheck vs postfix/mysql
Hi
I'm trying add new rules to logcheck, but as soon as it get dynamic
my new rules fails. For instance whenever postfix checks
user/password in my mysql-table, it's written i the log and i get a
mail. Here i tried to add new rules, but only the static works.
# Extras - Mysql Connection
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
auxprop plugin using mysql engine
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin try and connect to a host
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin trying to open db '[A-Za-z0-9_-]' on host
'[0-9].[0-9].[0-9].[0-9]'
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: begin
transaction
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin create statement from userPassword [A-Za-z0-9_-] smtp.mailfx.dk
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin doing query select [A-Za-z0-9_-] from [A-Za-z_-] where
username='[A-Za-z0-9_-]';
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql
plugin create statement from cmusaslsecretCRAM-MD5 [A-Za-z0-9_-]
smtp.mailfx.dk
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: commit
transaction
And in syslog it's mentioned every DDNS added to the zone-files and
i get a mail.
Jun 6 02:00:50 main dhcpd: if MacMini.utysket.dk. IN TXT
314f3e7ee90c473da0b3ebb4619f97e60f rrset exists and
MacMini.utysket.dk. IN A 172.16.0.19 rrset exists delete
MacMini.utysket.dk. IN A 172.16.0.19: success.
Jun 6 02:00:50 main dhcpd: if MacMini.utysket.dk. IN A rrset
doesn't exist delete MacMini.utysket.dk. IN TXT
314f3e7ee90c473da0b3ebb4619f97e60f: success.
Jun 6 02:00:50 main dhcpd: removed reverse map on
19.0.16.172.in-addr.arpa.
BTW is it regular exprisions that is being used? And what if i want
to add a new service to the logcheck/ignore.d.server directory. Do
i just add a new txt-file and it will be included at once? So if
anyone can help me with creating new rules, i would me very happy...
Thanks in advance...
/Lars
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Logcheck and Postfix
In Debian 2.2, logcheck is configured out of the box to mail reports to root every hour. I'm using Postfix for my MTA. Here's what's happening: logcheck mails its report to root, which is translated into [EMAIL PROTECTED] On my local lan, the domain is mars.lan, but I get my email from my ISP at quillandmouse.com. So the root address is being rewritten as [EMAIL PROTECTED] So what happens is that Postfix sends this out to my ISP. On my domain at my ISP, any mail not to a known addressee at quillandmouse.com gets forwarded to me. So I get all these hourly messages when I fetch mail for [EMAIL PROTECTED] I don't mind getting the messages, but they're going all the way to my ISP and then back down, when they should really just be locally mailed to me. But here's what makes it worse: My ISP won't accept any mail from anyone at mars.lan. It insists mail going to it has the quillandmouse.com domain on it. So I've had to make nearly everything in postfix so that it has quillandmouse.com on the end of it. I'm just not sure what to change so that mail for local delivery (like from root) gets delivered _locally_. Any ideas what I'm doing wrong? Paul
