Logcheck devel - Mar 2008 - Bug#471936: spamd log message about checking mail is not filtered correctly

Package: logcheck-database
Version: 1.2.63
Severity: normal
File: /etc/logcheck/ignore.d.server/spamd
Tags: patch

Hi

the filter for "processing message" from spamd is a bit inacurate as 
"aka <msgid>" part can also occur after "unknown"
phrase. Attached patch
fixes it.

-- 
	Michal ?iha? | http://cihar.com | http://blog.cihar.com

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.22-4-vserver-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- debconf information:
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false
-------------- next part --------------
--- /tmp/spam	2008-03-21 08:46:56.000000000 +0100
+++ /etc/logcheck/ignore.d.server/spamd	2008-03-21 08:47:08.000000000 +0100
@@ -8,7 +8,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:(
spamd:)? using default config for [-._+=[:alnum:]]+(@[-._[:alnum:]]+)?:
/[-./_[:alnum:]]+/\.spamassassin/user_prefs$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:(
spamd:)? creating default_prefs: /[-./_[:alnum:]]+/\.spamassassin/user_prefs$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:
config: created user preferences file:
/[-./_[:alnum:]]+/\.spamassassin/user_prefs$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:(
spamd:)? (process|check)ing message (<[^>]+>( aka
<[^>]+>)?|\(unknown\)) for
[-._+=[:alnum:]]+(@[-.[:alnum:]]+)?(:[[:digit:]]+)?$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:(
spamd:)? (process|check)ing message (<[^>]+>|\(unknown\))( aka
<[^>]+>)? for [-._+=[:alnum:]]+(@[-.[:alnum:]]+)?(:[[:digit:]]+)?$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:(
spamd:)? server pid: [[:digit:]]{1,5}$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:
logger: removing stderr method$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (spamd|check|re(port|voke))\[[0-9]+\]:
(spamd: )?result: [.YN] [ [:digit:]-]+ - ([._[:alnum:],]+
)?scantime=[0-9.]+,size=[0-9]+,(user=[^,]+,uid=[0-9]+,required_score=[0-9.]+,rhost=[._[:alnum:]-]+,raddr=[0-9.]+,rport=[0-9]+,)?mid=(<[^[:space:]]+>|\(unknown\))(rmid=(<[^[:space:]]+>|\(unknown\)),)?,(bayes=[.[:digit:]]+(e-[[:digit:]]+)?,)?autolearn=(ham|spam|no|disabled|unavailable)
*$

Your message dated Tue, 03 Jun 2008 22:47:04 +0000
with message-id <E1K3fHU-0000Mb-LB at ries.debian.org>
and subject line Bug#471936: fixed in logcheck 1.2.64
has caused the Debian Bug report #471936,
regarding spamd log message about checking mail is not filtered correctly
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
471936: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471936
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: =?utf-8?b?TWljaGFsIMSMaWhhxZk=?= <nijel at debian.org>
Subject: spamd log message about checking mail is not filtered correctly
Date: Fri, 21 Mar 2008 08:49:02 +0100
Size: 4206
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080603/849f8e58/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: maximilian attems <maks at debian.org>
Subject: Bug#471936: fixed in logcheck 1.2.64
Date: Tue, 03 Jun 2008 22:47:04 +0000
Size: 9508
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080603/849f8e58/attachment-0001.eml