Hei hei,
I ran into this again on jessie and investigated a little. This is what
I found out: the file /etc/logcheck/ignore.d.server/ssmtp belongs to the
package ssmtp, not to logcheck-database.
The code actually sending the message matched against is in function
'int ssmtp(char *argv[])' somewhere near line 1689 of ssmtp.c:
log_event(LOG_INFO, "Sent mail for %s (%s) uid=%d username=%s
outbytes=%d",
from_strip(uad), buf, uid, pw->pw_name, outbytes);
The part which does not match is the one in braces, and this 'buf' is
filled some lines before with:
(void)smtp_okay(sock, buf);
This seems to be actually a response from the SMTP server and probably
depends on the SMTP server where sSMTP drops the mail, so it could be
any SMTP out there. I'm not familiar with different SMTP implementations
and what the possible output could be, so I can not make a good
suggestion what to match here.
HTH & Greets
Alex
--
?With the first link, the chain is forged. The first speech censured,
the first thought forbidden, the first freedom denied, chains us all
irrevocably.? (Jean-Luc Picard, quoting Judge Aaron Satie)
*** GnuPG-FP: 02C8 A590 7FE5 CA5F 3601 D1D5 8FBA 7744 CC87 10D0 ***