Martin Lohmeier
2005-Feb-22 15:27 UTC
[Logcheck-devel] Bug#296449: logcheck-database: sasl / sql ignore rules for postfix
Package: logcheck-database
Version: 1.2.34
Severity: wishlist
Hi,
this little patch (I used it on /etc/logcheck/ignore.d.server/postfix)
makes logcheck to ignore sasl/sql messages.
by, Martin
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.4.30.11 Debian configuration management sy
-- debconf information:
logcheck-database/rules-directories-note:
logcheck-database/standard-rename-note:
logcheck-database/conffile-cleanup: false
-------------- next part --------------
--- /root/postfix.orig 2005-02-21 03:13:56.000000000 +0100
+++ postfix 2005-02-21 03:25:29.000000000 +0100
@@ -65,3 +65,13 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: SSL_accept error
from [._[:alnum:]-]+\[[0-9.]{7,15}\]: -1$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]: [0-9A-F]+:
to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)*
relay=[^[:space:]]+(\]|\[[^[:space:]]+\]), delay=[0-9]+, status=sent \(250
[0-9\.]+ Ok(, id=[-0-9]+, from MTA: 250 Ok: queued as [0-9A-F]+)*\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: : SPF pass:
smtp_comment=.*: [.[:alnum:]]+ MX [.[:alnum:]]+ A [0-9.]+,
header_comment=[.[:alnum:]+: domain of [%[:punct:][:alnum:]]+@[.[:alnum:]]+
designates [.0-9]+ as permitted sender$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql auxprop plugin
using mysql engine$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin Parse
the username .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin try and
connect to a host$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin trying
to open db '.*' on host '.*'$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: begin transaction$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin create
statement from userPassword .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin doing
query select .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin create
statement from .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin doing
query select .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: commit transaction$
Jamie L. Penman-Smithson
2005-Feb-22 17:25 UTC
[Logcheck-devel] Bug#296449: logcheck-database: sasl / sql ignore rules for postfix
On Tue, 2005-02-22 at 16:27 +0100, Martin Lohmeier wrote:> this little patch (I used it on /etc/logcheck/ignore.d.server/postfix) > makes logcheck to ignore sasl/sql messages.Those messages look like they're caused because you have 'sql_verbose' turned on, or your log_level set too high (it's 1 by default). Try checking your SASL settings. Thanks, -- -jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org w: http://www.silverdream.org | p: sms at silverdream.org pgp key @ http://silverdream.org/~jps/pub.key 21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050222/430f4f26/attachment.pgp
Debian Bug Tracking System
2005-Feb-22 18:48 UTC
[Logcheck-devel] Bug#296449: marked as done (logcheck-database: sasl / sql ignore rules for postfix)
Your message dated Tue, 22 Feb 2005 18:36:32 +0000 with message-id <1109097392.3159.7.camel at localhost> and subject line Bug#296449: logcheck-database: sasl / sql ignore rules for postfix has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 22 Feb 2005 15:27:46 +0000>From blackm at ferris.dyndns.info Tue Feb 22 07:27:46 2005Return-path: <blackm at ferris.dyndns.info> Received: from ipx-190-250-190-80.ipxserver.de (debian.monochromata.de) [80.190.250.190] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1D3bww-0003cc-00; Tue, 22 Feb 2005 07:27:46 -0800 Received: from localhost (localhost [127.0.0.1]) by debian.monochromata.de (Postfix) with ESMTP id 36D192EC03F for <submit at bugs.debian.org>; Tue, 22 Feb 2005 16:27:44 +0100 (CET) Received: from debian.monochromata.de ([127.0.0.1]) by localhost (ipx10645 [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28548-01 for <submit at bugs.debian.org>; Tue, 22 Feb 2005 16:27:38 +0100 (CET) Received: by debian.monochromata.de (Postfix, from userid 1002) id D88A82EC005; Tue, 22 Feb 2005 16:27:37 +0100 (CET) Content-Type: multipart/mixed; boundary="===============1744107669==" MIME-Version: 1.0 From: Martin Lohmeier <blackm at ferris.dyndns.info> To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: logcheck-database: sasl / sql ignore rules for postfix X-Mailer: reportbug 3.8 Date: Tue, 22 Feb 2005 16:27:37 +0100 Message-Id: <20050222152737.D88A82EC005 at debian.monochromata.de> X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at debian.monochromata.de Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: This is a multi-part MIME message sent by reportbug. --===============1744107669=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Package: logcheck-database Version: 1.2.34 Severity: wishlist Hi, this little patch (I used it on /etc/logcheck/ignore.d.server/postfix) makes logcheck to ignore sasl/sql messages. by, Martin -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.10 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.30.11 Debian configuration management sy -- debconf information: logcheck-database/rules-directories-note: logcheck-database/standard-rename-note: logcheck-database/conffile-cleanup: false --===============1744107669=Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="postfix.patch" --- /root/postfix.orig 2005-02-21 03:13:56.000000000 +0100 +++ postfix 2005-02-21 03:25:29.000000000 +0100 @@ -65,3 +65,13 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: SSL_accept error from [._[:alnum:]-]+\[[0-9.]{7,15}\]: -1$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/lmtp\[[0-9]+\]: [0-9A-F]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)* relay=[^[:space:]]+(\]|\[[^[:space:]]+\]), delay=[0-9]+, status=sent \(250 [0-9\.]+ Ok(, id=[-0-9]+, from MTA: 250 Ok: queued as [0-9A-F]+)*\)$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: : SPF pass: smtp_comment=.*: [.[:alnum:]]+ MX [.[:alnum:]]+ A [0-9.]+, header_comment=[.[:alnum:]+: domain of [%[:punct:][:alnum:]]+@[.[:alnum:]]+ designates [.0-9]+ as permitted sender$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql auxprop plugin using mysql engine$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin Parse the username .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin try and connect to a host$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin trying to open db '.*' on host '.*'$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: begin transaction$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin create statement from userPassword .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin doing query select .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin create statement from .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: sql plugin doing query select .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: commit transaction$ --===============1744107669==-- --------------------------------------- Received: (at 296449-done) by bugs.debian.org; 22 Feb 2005 18:37:09 +0000>From jamie at silverdream.org Tue Feb 22 10:37:09 2005Return-path: <jamie at silverdream.org> Received: from lorien.silverdream.org [82.133.58.131] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1D3euC-000440-00; Tue, 22 Feb 2005 10:37:09 -0800 Received: from localhost (localhost [127.0.0.1]) by lorien.silverdream.org (Postfix) with ESMTP id F1204480180F; Tue, 22 Feb 2005 18:36:36 +0000 (GMT) Received: from lorien.silverdream.org ([127.0.0.1]) by localhost (lorien.silverdream.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 04837-02-2; Tue, 22 Feb 2005 18:36:33 +0000 (GMT) Received: from hercules.silverdream.hq (pegasus.pinklemon.net [82.133.58.129]) (using SSLv3 with cipher RC4-MD5 (128/128 bits)) (Client did not present a certificate) by lorien.silverdream.org (Postfix) with ESMTP id 278194801808; Tue, 22 Feb 2005 18:36:33 +0000 (GMT) Subject: Re: Bug#296449: logcheck-database: sasl / sql ignore rules for postfix From: "Jamie L. Penman-Smithson" <jamie at silverdream.org> Reply-To: jamie at silverdream.org To: Martin Lohmeier <blackm at ferris.dyndns.info>, 296449 at bugs.debian.org Cc: 296449-done at bugs.debian.org In-Reply-To: <421B750B.10105 at ferris.dyndns.info> References: <20050222152737.D88A82EC005 at debian.monochromata.de> <1109093124.3159.4.camel at localhost> <421B750B.10105 at ferris.dyndns.info> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-ZfSNboLyxNMTGkiyXm1D" Organization: PinkLemon Internet Services Date: Tue, 22 Feb 2005 18:36:32 +0000 Message-Id: <1109097392.3159.7.camel at localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.0.3 X-Virus-Scanned: by amavisd-maia-1.0.0-rc5 (Debian) at silverdream.org Delivered-To: 296449-done at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: X-CrossAssassin-Score: 2 --=-ZfSNboLyxNMTGkiyXm1D Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Tue, 2005-02-22 at 19:08 +0100, Martin Lohmeier wrote:> Jamie L. Penman-Smithson wrote: > | Try checking your SASL settings. >=20 > Oh yes....I had have a look in /etc/postfix/sasl/smtpd.conf but there > was nothing with log or debug in...didn't know that default is 1. >=20 > I set it to 0 and they disappeared :-) Send the patch to /dev/zero...Great :) I'll go ahead and close this bug. --=20 -jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org w: http://www.silverdream.org | p: sms at silverdream.org pgp key @ http://silverdream.org/~jps/pub.key 21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58 --=-ZfSNboLyxNMTGkiyXm1D Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQBCG3uw0mxM1DK1CAsRAuI3AJ9IGQbBg3SSulXrETW1GTFfw8DwFwCfWbKK OW6idM9g9bu61eLIeTn/Hd4=f7si -----END PGP SIGNATURE----- --=-ZfSNboLyxNMTGkiyXm1D--