Guillaume Rischard
2004-Jun-04 19:53 UTC
[Logcheck-devel] Bug#252712: logcheck-database: Typo in postfix results in messages not being ignored
Package: logcheck-database
Version: 1.2.21
Severity: normal
Tags: patch
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.20-020stab009.8.777-enterprise
Locale: LANG=C, LC_CTYPE=C
Versions of packages logcheck-database depends on:
ii debconf [debconf-2.0] 1.4.25 Debian configuration management sy
-- debconf information:
* logcheck-database/conffile-cleanup: true
* logcheck-database/rules-directories-note:
* logcheck-database/security_level: server
* logcheck-database/standard-rename-note:
There is an extra single dash at the beginning of line 23 in the postfix ignore
file. This causes messages like:
Jun 4 18:00:45 pioneer postfix/smtp[6848]: connect to
better-svc-plans.com[66.139.78.239]: Connection refused (port 25)
While I'm still working on a patch that will automatically screw lightbulbs
in spammers' ears when they cause that message, here is one that will at
least get rid of it in the reports.
Cheers,
Guillaume
--- postfix.orig 2004-06-04 19:33:29.000000000 +0000
+++ postfix 2004-06-04 19:33:44.000000000 +0000
@@ -20,7 +20,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: Verified:
subject_CN=.*, issuer=.*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: OTP unavailable
because can't read/write key database /etc/opiekeys: No such file or
directory$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [A-Z0-9]+: reject:
RCPT from [^[:space:]]+: [45][0-9][0-9] .*$
-'^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to
[^[:space:]]+ Connection refused \(port [0-9]+\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to
[^[:space:]]+ Connection refused \(port [0-9]+\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to
[^[:space:]]+ No route to host \(port 25\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to
[^[:space:]]+ Network is unreachable \(port 25\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to
[^[:space:]]+ server refused mail service \(port 25\)$
Debian Bug Tracking System
2004-Jun-05 19:03 UTC
[Logcheck-devel] Bug#252712: marked as done (logcheck-database: Typo in postfix results in messages not being ignored)
Your message dated Sat, 05 Jun 2004 14:47:15 -0400 with message-id <E1BWgCJ-0002Wy-00 at newraff.debian.org> and subject line Bug#252712: fixed in logcheck 1.2.22 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 4 Jun 2004 19:53:46 +0000>From stereo at pioneer.stereo.lu Fri Jun 04 12:53:46 2004Return-path: <stereo at pioneer.stereo.lu> Received: from pioneer.stereo.lu [65.248.4.111] (postfix) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1BWKl8-0006tJ-00; Fri, 04 Jun 2004 12:53:46 -0700 Received: by pioneer.stereo.lu (Mail Service, from userid 1001) id B0CE4592033; Fri, 4 Jun 2004 19:53:42 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Guillaume Rischard <reportbug-nospam at stereo.lu> To: Debian Bug Tracking System <submit at bugs.debian.org> Subject: logcheck-database: Typo in postfix results in messages not being ignored X-Mailer: reportbug 2.61 Date: Fri, 04 Jun 2004 19:53:42 +0000 Message-Id: <20040604195342.B0CE4592033 at pioneer.stereo.lu> Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: Package: logcheck-database Version: 1.2.21 Severity: normal Tags: patch -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.20-020stab009.8.777-enterprise Locale: LANG=C, LC_CTYPE=C Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.4.25 Debian configuration management sy -- debconf information: * logcheck-database/conffile-cleanup: true * logcheck-database/rules-directories-note: * logcheck-database/security_level: server * logcheck-database/standard-rename-note: There is an extra single dash at the beginning of line 23 in the postfix ignore file. This causes messages like: Jun 4 18:00:45 pioneer postfix/smtp[6848]: connect to better-svc-plans.com[66.139.78.239]: Connection refused (port 25) While I'm still working on a patch that will automatically screw lightbulbs in spammers' ears when they cause that message, here is one that will at least get rid of it in the reports. Cheers, Guillaume --- postfix.orig 2004-06-04 19:33:29.000000000 +0000 +++ postfix 2004-06-04 19:33:44.000000000 +0000 @@ -20,7 +20,7 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: Verified: subject_CN=.*, issuer=.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: OTP unavailable because can't read/write key database /etc/opiekeys: No such file or directory$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [A-Z0-9]+: reject: RCPT from [^[:space:]]+: [45][0-9][0-9] .*$ -'^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ Connection refused \(port [0-9]+\)$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ Connection refused \(port [0-9]+\)$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ No route to host \(port 25\)$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ Network is unreachable \(port 25\)$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: connect to [^[:space:]]+ server refused mail service \(port 25\)$ --------------------------------------- Received: (at 252712-close) by bugs.debian.org; 5 Jun 2004 18:53:06 +0000>From katie at ftp-master.debian.org Sat Jun 05 11:53:06 2004Return-path: <katie at ftp-master.debian.org> Received: from newraff.debian.org [208.185.25.31] (mail) by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1BWgHy-00046h-00; Sat, 05 Jun 2004 11:53:06 -0700 Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian)) id 1BWgCJ-0002Wy-00; Sat, 05 Jun 2004 14:47:15 -0400 From: Todd Troxell <ttroxell at debian.org> To: 252712-close at bugs.debian.org X-Katie: $Revision: 1.49 $ Subject: Bug#252712: fixed in logcheck 1.2.22 Message-Id: <E1BWgCJ-0002Wy-00 at newraff.debian.org> Sender: Archive Administrator <katie at ftp-master.debian.org> Date: Sat, 05 Jun 2004 14:47:15 -0400 Delivered-To: 252712-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2004_03_25 X-Spam-Level: X-CrossAssassin-Score: 12 Source: logcheck Source-Version: 1.2.22 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.22_all.deb to pool/main/l/logcheck/logcheck-database_1.2.22_all.deb logcheck_1.2.22.dsc to pool/main/l/logcheck/logcheck_1.2.22.dsc logcheck_1.2.22.tar.gz to pool/main/l/logcheck/logcheck_1.2.22.tar.gz logcheck_1.2.22_all.deb to pool/main/l/logcheck/logcheck_1.2.22_all.deb logtail_1.2.22_all.deb to pool/main/l/logcheck/logtail_1.2.22_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 252712 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Saturday, 05 Jun 2004 14:02:47 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.22 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - Mails anomalies in the system logfiles to the administrator logcheck-database - A database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 187496 214117 244172 249181 249474 252078 252174 252216 252556 252597 252661 252712 Changes: logcheck (1.2.22) unstable; urgency=low . maks: * Remove broken attempt to avoid UTF-8. (Closes: #214117) * Update automount, innd, kernel, openvpn, postfix rules. (Closes: #252216, #249474, #244172, #252174, #187496, #249181, #252712) * Better readability of greplogoutput() in logcheck. * Our Perl usage needs 5.8, add dependency. (Closes: #252078) * Rename conflicting logcheck-sendmail rule in logcheck-sendmail_tmp Sendmail ships aboves rule. (Closes: #252661, #252556) todd: * add MAILTO=root to logcheck.cron.d (Closes: #252597) Files: b4d649271722f1adaba3eae3b961bcb4 670 admin optional logcheck_1.2.22.dsc cce8e3065b2037b4fdc21af925488117 72703 admin optional logcheck_1.2.22.tar.gz 15e4a28c47997a531f2c6c8fbc3e1fee 36578 admin optional logcheck_1.2.22_all.deb 7ffa1c5b19d6a56da2907fbc7cf8731e 40522 admin optional logcheck-database_1.2.22_all.deb f4125c78ea56ea2b69da7128731da1cc 21352 admin optional logtail_1.2.22_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAwgxt4u3oQ3FHP2YRAiNUAKDRYE0ttlDkso7D/RmM1CW4TUMrrACfWbfi sOHqiHBgCnThHOqDehtkSVE=Sk5k -----END PGP SIGNATURE-----