Logcheck devel - Jun 2008 - Bug#487208: logcheck-database: Nagios pop-3 tests should be ignored by logcheck

Package: logcheck-database
Version: 1.2.63~bpo40+2
Severity: normal

I have nagios(2|3) checking a pop3-server where i run logcheck, and this adds
the following line on each check (every 5 min)

Jun 20 12:04:38 xxxxxxxx dovecot: pop3-login: Aborted login (0 authentication
attempts): rip=xxx.xxx.xxx.xxx, lip=yyy.yyy.yyy.yyy

I tried to add the following line to ignore.d.server/dovecot, but the errors are
still slipping through...

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (pop3|imap)-login: Aborted
login \(0 authentication attempts\): rip=[.:[:xdigit:]]+, lip=[.:[:xdigit:]]$

<Ren?>

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

-- debconf information:
  logcheck-database/conffile-cleanup: false

Your message dated Wed, 25 Jun 2008 13:02:07 +0000
with message-id <E1KBUdT-0003oz-5a at ries.debian.org>
and subject line Bug#487208: fixed in logcheck 1.2.65
has caused the Debian Bug report #487208,
regarding logcheck-database: Nagios pop-3 tests should be ignored by logcheck
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
487208: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487208
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: =?utf-8?q?Ren=C3=A9_Hertell?= <bugs.debian.org at hertell.com>
Subject: logcheck-database: Nagios pop-3 tests should be ignored by logcheck
Date: Fri, 20 Jun 2008 11:11:14 +0300
Size: 2474
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080625/6b7a62cc/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: madduck at debian.org (martin f. krafft)
Subject: Bug#487208: fixed in logcheck 1.2.65
Date: Wed, 25 Jun 2008 13:02:07 +0000
Size: 7009
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080625/6b7a62cc/attachment-0001.eml