Logcheck devel - May 2006 - Bug#368483: logcheck-database: new rule for ignore.d.server/postfix

Package: logcheck-database
Version: 1.2.39
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I'd like to add a new rule to ignore.d.server/postfix:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: warning: .*: RBL
lookup error: Host or domain name not found. Name service error for name=.*
type=A: Host not found, try again$

The attached file contain a few lines that should be ignored.

bye, Martin

- -- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (900, 'testing'), (100, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16.1
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEcd+iOvJj+wS6JuIRAtuQAJ0SKFyvGGPDfusDGp6NJLedA9wfhgCfWprG
LQBJ83B1WBTTjKYL2lfKqjs=6w6t
-----END PGP SIGNATURE-----
-------------- next part --------------
May 22 01:07:56 djinn01 postfix/smtpd[19512]: warning:
36.18.155.200.ix.dnsbl.manitu.net: RBL lookup error: Host or domain name not
found. Name service error for name=36.18.155.200.ix.dnsbl.manitu.net type=A:
Host not found, try again
May 22 01:13:55 djinn01 postfix/smtpd[19792]: warning:
159.153.128.74.ix.dnsbl.manitu.net: RBL lookup error: Host or domain name not
found. Name service error for name=159.153.128.74.ix.dnsbl.manitu.net type=A:
Host not found, try again
May 22 01:15:23 djinn01 postfix/smtpd[19792]: warning:
219.25.31.59.ix.dnsbl.manitu.net: RBL lookup error: Host or domain name not
found. Name service error for name=219.25.31.59.ix.dnsbl.manitu.net type=A: Host
not found, try again

On 22 May 2006, at 16:58, Martin Lohmeier wrote:
> I'd like to add a new rule to ignore.d.server/postfix:
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]:  
> warning: .*: RBL lookup error: Host or domain name not found. Name  
> service error for name=.* type=A: Host not found, try again$
>
> The attached file contain a few lines that should be ignored.
These messages indicate a DNS problem, either the RBL in question has  
broken nameservers (in which case commenting it out for the time  
being is a good course of action), or the local system has broken  
nameservers and they need to be "fixed".

I think that any administrator would want to know about either of  
these issues, not have them ignored.

-j


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20060604/e4aeb690/attachment.pgp