Rainer Zocholl
2005-Jul-17 10:33 UTC
[Logcheck-devel] Bug#318731: spamd rule does not work
Package: logcheck
Version: "most recent stable"
Hello
i can't block the spamd warning.
Why?
may the problem be the end of line terminated in ". $"
But using "\. $" does not help.
[23:33:42]host1:/etc/logcheck/ignore.d.server# ll spamd
-rw-r----- 1 root logcheck 789 Jul 16 23:32 spamd
[23:29:49]host1:/etc/logcheck/ignore.d.server# cat spamd
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: Argument \"RBL\"
isn't numeric in addition \(\+\) at
/usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. $
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: connection from
[._[:alnum:]-]+ \[[\.[:digit:]]+\] at port [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: info: setuid to
[[:alnum:]-]+ succeeded$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (checking|processing)
message .* for [._[:alnum:]-]+:[0-9]+\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: clean message
\([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+
bytes\.$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: identified spam
\([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+
bytes\.$
#egrep -f spamd /var/log/messages
Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in
addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244.
Why does logcheck still generate this error:
[23:34:59]host1:/etc/logcheck/ignore.d.server# su -s /bin/bash -c
"/usr/sbin/logcheck -t -o " logcheck
System Events
=-=-=-=-=-=-Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't
numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244.
If i run "-d" i see that spamd is really included (How can
i place that output of "su" into a file?)
Jamie L. Penman-Smithson
2005-Jul-17 12:31 UTC
Bug#318731: [Logcheck-devel] Bug#318731: spamd rule does not work
package logcheck merge 317642 318731 tags 318731 wontfix thanks On Sun, 2005-07-17 at 12:33 +0200, Rainer Zocholl wrote:> Package: logcheck > Version: "most recent stable"Use apt to find the version number, "most recent stable" is pretty useless. Don't open multiple bug reports about the same issue. There is already #317642. This isn't a problem with logcheck, it's a problem with _your own_ rules, therefore this isn't a bug and the BTS isn't really the best place, there's the logcheck-users mailing list which would be better. Read README.logcheck-database, it explains, in detail, how to write rules and how to test them correctly.> i can't block the spamd warning. > > Why?Your rule has a trailing space, since all log messages have trailing spaces stripped before they are processed, your rule will never match anything. Removing the trailing space should fix the problem: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: Argument \"RBL\" isn't numeric in addition \(\+\) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244.$ Finally, this message indicates a _PROBLEM_ with your spamassassin configuration, ignoring it _will not_ make the problem disappear. Ignoring errors is not a good strategy. See bug #3853 in SA's bugzilla (which I found within 5 seconds using Google) which was the result of misconfiguration:> ------- Additional Comments From felicity at kluge.net 2004-10-01 10:05 > ------- > This type of issue has always been something like: > > score FOO_RULE RBL 3 > > somewhere in the configuration files. Could be in any of > the /etc/mail/spamassassin/*.cf files, or in > user_prefs, or anywhere your SA installation gets configuration data > from.Fix the problem in your SA configuration. -- -Jamie L. Penman-Smithson <jamie at silverdream.org> t: +44 1273 424795; f: +44 1273 424795 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8 never send mail to: oubliette.z at gmail.com -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20050717/ee124fd1/attachment.pgp
Debian Bug Tracking System
2005-Jul-17 12:48 UTC
Processed: Re: [Logcheck-devel] Bug#318731: spamd rule does not work
Processing commands for control at bugs.debian.org:> package logcheckIgnoring bugs not assigned to: logcheck> merge 317642 318731Bug#317642: How to debug logcheck? Bug#318731: spamd rule does not work Merged 317642 318731.> tags 318731 wontfixBug#318731: spamd rule does not work There were no tags set. Bug#317642: How to debug logcheck? Tags added: wontfix> thanksStopping processing here. Please contact me if you need assistance. Debian bug tracking system administrator (administrator, Debian Bugs database)
Debian Bug Tracking System
2005-Aug-22 20:48 UTC
[Logcheck-devel] Bug#318731: marked as done (spamd rule does not work)
Your message dated Mon, 22 Aug 2005 13:32:39 -0700 with message-id <E1E7IyF-0002y5-00 at spohr.debian.org> and subject line Bug#317642: fixed in logcheck 1.2.41 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 17 Jul 2005 10:33:07 +0000>From UseNet-Posting-Nospam-74308- at zocki.toppoint.de Sun Jul 17 03:33:07 2005Return-path: <UseNet-Posting-Nospam-74308- at zocki.toppoint.de> Received: from archer.toppoint.de (mail.toppoint.de) [195.244.243.1] by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1Du6SI-0004KB-00; Sun, 17 Jul 2005 03:33:06 -0700 Received: (from uucp at localhost) by mail.toppoint.de (8.11.7p1+Sun/8.11.7) id j6HAX2616834 for submit at bugs.debian.org; Sun, 17 Jul 2005 12:33:02 +0200 (MEST)>Received: by zocki.toppoint.de (CrossPoint/FreeXP v3.40 RC3 (EMS) @ 3108030130 R/C6515);17 Jul 2005 12:33:27 +0200 Date: 17 Jul 2005 12:33:00 +0200 From: Rainer Zocholl <UseNet-Posting-Nospam-74308- at zocki.toppoint.de> To: <submit at bugs.debian.org> Message-ID: <9a0ASH56gjB at zocki.toppoint.de> Subject: spamd rule does not work X-Mailer: CrossPoint/FreeXP v3.40 RC3 (EMS) @ 3108030130 R/C6515 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Organization: http://www.toppoint.de X-ZC-Telefon: V+49-431-5606-550Q V+49-431-562136Q X-XP-Version: CrossPoint/FreeXP v3.40 RC3 (EMS) @ 3108030130 R/C6515 X-RFC-Converter: E-UUZ/II [FreeXP v3.40.1a RC3] @ 200405292345 Received: from zocki.toppoint.de by archer.toppoint.de; Sun, 17 Jul 2005 12:33 MES Content-Type: text/plain; charset=US-ASCII Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-7.3 required=4.0 tests=BAYES_00,HAS_PACKAGE, MSGID_FROM_MTA_HEADER autolearn=no version=2.60-bugs.debian.org_2005_01_02 Package: logcheck Version: "most recent stable" Hello i can't block the spamd warning. Why? may the problem be the end of line terminated in ". $" But using "\. $" does not help. [23:33:42]host1:/etc/logcheck/ignore.d.server# ll spamd -rw-r----- 1 root logcheck 789 Jul 16 23:32 spamd [23:29:49]host1:/etc/logcheck/ignore.d.server# cat spamd ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: Argument \"RBL\" isn't numeric in addition \(\+\) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. $ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: connection from [._[:alnum:]-]+ \[[\.[:digit:]]+\] at port [0-9]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: info: setuid to [[:alnum:]-]+ succeeded$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (checking|processing) message .* for [._[:alnum:]-]+:[0-9]+\.$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: clean message \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: identified spam \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$ #egrep -f spamd /var/log/messages Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. Why does logcheck still generate this error: [23:34:59]host1:/etc/logcheck/ignore.d.server# su -s /bin/bash -c "/usr/sbin/logcheck -t -o " logcheck System Events =-=-=-=-=-=-Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. If i run "-d" i see that spamd is really included (How can i place that output of "su" into a file?) --------------------------------------- Received: (at 317642-close) by bugs.debian.org; 22 Aug 2005 20:45:57 +0000>From katie at spohr.debian.org Mon Aug 22 13:45:57 2005Return-path: <katie at spohr.debian.org> Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian)) id 1E7IyF-0002y5-00; Mon, 22 Aug 2005 13:32:39 -0700 From: Todd Troxell <ttroxell at debian.org> To: 317642-close at bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#317642: fixed in logcheck 1.2.41 Message-Id: <E1E7IyF-0002y5-00 at spohr.debian.org> Sender: Archive Administrator <katie at spohr.debian.org> Date: Mon, 22 Aug 2005 13:32:39 -0700 Delivered-To: 317642-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-CrossAssassin-Score: 4 Source: logcheck Source-Version: 1.2.41 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.41_all.deb to pool/main/l/logcheck/logcheck-database_1.2.41_all.deb logcheck_1.2.41.dsc to pool/main/l/logcheck/logcheck_1.2.41.dsc logcheck_1.2.41.tar.gz to pool/main/l/logcheck/logcheck_1.2.41.tar.gz logcheck_1.2.41_all.deb to pool/main/l/logcheck/logcheck_1.2.41_all.deb logtail_1.2.41_all.deb to pool/main/l/logcheck/logtail_1.2.41_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 317642 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 22 Aug 2005 15:27:45 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.41 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - mails anomalies in the system logfiles to the administrator logcheck-database - database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 311216 312597 312598 312729 313601 313603 314951 315507 316612 317642 317741 317772 318500 318731 320009 321506 322036 322179 322570 Changes: logcheck (1.2.41) unstable; urgency=low . [ Jamie Penman-Smithson ] * Fix postfix rule to match "setting up TLS connection" messages again. * Fix innd rule for "ME time" messages, add rule for innfeed "ME time" messages. * Fix rules for gps to match messages with the null sender (<>). * Update cyrus/notifyd rule to match destination folders and subfolders too. * Update cyrus rules to suppress DBERROR db3: n lockers messages when it's only 1-2 lockers, these messages are harmless as long as the number doesn't increase. * Update postfix lmtp rule to match messages given by amavis when discarding UBE and viruses. * Fix bug in the squid rule for "found whitespace" messages which caused grep to choke due to unescaped { and } characters. (Closes: #311216) * Update innd nnrpd rule for latest version of INN. * Add a versioned dependency on grep to prevent bugs like #311216 happening in the first place. * Added Vietnamese translation, thanks to Clytie Siddall. (Closes: #312597) * Fix minor typo in logcheck-database.templates. (Closes: #312598) * Modify rules for successful ssh login messages to match when ssh/ssh2 is not specified at the end. (Closes: #312729) * Modified ignore.d.workstation/kernel to ignore nfs warnings about mount version. (Closes: #313601) * Fix postfix anvil rules to match max message/recipient rate and count messages. * Add the first rules for dkfilter, which implements domainkeys signing and verification for postfix. * Add rule for openssh-krb5 and add gssapi-with-mic to the list of auth alternatives. (Closes: #318500) * Add ovpn-tunnel rule to suppress "VERIFY OK: nsCertType=SERVER" messages. Thanks to Martin Lohmeier <martin at mein-horde.de>. (Closes: #320009) . [ Maximilian Attems ] * Suppress error message if hostname not set. (Closes: #314951) * Add another sshd rule for PARANOID /etc/hosts.deny setting. * Fix postfix rule concerning Service unavailable. (Closes: #315507) * Add some initial support for exim4 log messages. Pretty rudimentary stuff still, will need further refinements. (Closes: #316612) * First rule for amandad. (Closes: #313603) * Remention how to invoke logcheck with sudo. * Add an examples section to the manpage with my most usual invocation. * Fix rules for gconfd loglines. * Add rule for mailman admin loglines in violations.ignore.d/logcheck-postfix thanks toby cabot <toby at caboteria.org>. (Closes: #317772) * Fix hostname match in rbldnsd rule thanks sistemas at dedaloingenieros.com. (Closes: #317741) * Unifiy gdm rules, add a rule for X restart. * Beautify README.logcheck-database, uses markdown(1) syntax now. Added testing rules header to carify sections. (Closes: #317642, #318731) * Small manpage fixes. * Add 2 courier rules for ACCEPTED usernames and the started client module. * Add pdns rule for duplicate packets from recursor. * Fix cvs rule for exit code != 0. thanks Martin Lohmeier <martin at mein-horde.de> (Closes: #321506) * Fix hostname match in cups-lpd rules thanks Gilbert Laycock <gtl1 at mcs.le.ac.uk> (Closes: #322179) * Add horde3 rules for users login/logout thanks Martin Lohmeier <martin at mein-horde.de> (Closes: #322570) * Fix logcheck.8 rendering of docbook-to-man. (Closes: #322036) . [Todd Troxell] * Tweak descriptions to satisfy litian. Files: 1885143b4845e7da6dc748ef4f2ec7fb 736 admin optional logcheck_1.2.41.dsc 1a946e45f82a0dc98838c896510dfca9 101085 admin optional logcheck_1.2.41.tar.gz 4ec4e8c0a9227a8c06a716675f8a0d3f 47870 admin optional logcheck_1.2.41_all.deb 3bf53f05bfb119af9e2c1da3c8130f12 67460 admin optional logcheck-database_1.2.41_all.deb 078148d37c693d7dd9511355d70e7d40 29826 admin optional logtail_1.2.41_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFDCijR4u3oQ3FHP2YRAjnTAJwL7ztRs3iUx4sltg+pROJaxdf/QgCgtall nSanCABtCnyTfEYFeoyVZQ4=M6Pk -----END PGP SIGNATURE-----
Debian Bug Tracking System
2005-Aug-22 20:48 UTC
[Logcheck-devel] Bug#318731: marked as done (spamd rule does not work)
Your message dated Mon, 22 Aug 2005 13:32:39 -0700 with message-id <E1E7IyF-0002yD-00 at spohr.debian.org> and subject line Bug#318731: fixed in logcheck 1.2.41 has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 17 Jul 2005 10:33:07 +0000>From UseNet-Posting-Nospam-74308- at zocki.toppoint.de Sun Jul 17 03:33:07 2005Return-path: <UseNet-Posting-Nospam-74308- at zocki.toppoint.de> Received: from archer.toppoint.de (mail.toppoint.de) [195.244.243.1] by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1Du6SI-0004KB-00; Sun, 17 Jul 2005 03:33:06 -0700 Received: (from uucp at localhost) by mail.toppoint.de (8.11.7p1+Sun/8.11.7) id j6HAX2616834 for submit at bugs.debian.org; Sun, 17 Jul 2005 12:33:02 +0200 (MEST)>Received: by zocki.toppoint.de (CrossPoint/FreeXP v3.40 RC3 (EMS) @ 3108030130 R/C6515);17 Jul 2005 12:33:27 +0200 Date: 17 Jul 2005 12:33:00 +0200 From: Rainer Zocholl <UseNet-Posting-Nospam-74308- at zocki.toppoint.de> To: <submit at bugs.debian.org> Message-ID: <9a0ASH56gjB at zocki.toppoint.de> Subject: spamd rule does not work X-Mailer: CrossPoint/FreeXP v3.40 RC3 (EMS) @ 3108030130 R/C6515 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Organization: http://www.toppoint.de X-ZC-Telefon: V+49-431-5606-550Q V+49-431-562136Q X-XP-Version: CrossPoint/FreeXP v3.40 RC3 (EMS) @ 3108030130 R/C6515 X-RFC-Converter: E-UUZ/II [FreeXP v3.40.1a RC3] @ 200405292345 Received: from zocki.toppoint.de by archer.toppoint.de; Sun, 17 Jul 2005 12:33 MES Content-Type: text/plain; charset=US-ASCII Delivered-To: submit at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-7.3 required=4.0 tests=BAYES_00,HAS_PACKAGE, MSGID_FROM_MTA_HEADER autolearn=no version=2.60-bugs.debian.org_2005_01_02 Package: logcheck Version: "most recent stable" Hello i can't block the spamd warning. Why? may the problem be the end of line terminated in ". $" But using "\. $" does not help. [23:33:42]host1:/etc/logcheck/ignore.d.server# ll spamd -rw-r----- 1 root logcheck 789 Jul 16 23:32 spamd [23:29:49]host1:/etc/logcheck/ignore.d.server# cat spamd ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: Argument \"RBL\" isn't numeric in addition \(\+\) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. $ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: connection from [._[:alnum:]-]+ \[[\.[:digit:]]+\] at port [0-9]+$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: info: setuid to [[:alnum:]-]+ succeeded$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: (checking|processing) message .* for [._[:alnum:]-]+:[0-9]+\.$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: clean message \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ spamd\[[0-9]+\]: identified spam \([0-9.-]+/[0-9.]+\) for [._[:alnum:]-]+:[0-9]+ in [0-9.]+ seconds, [0-9]+ bytes\.$ #egrep -f spamd /var/log/messages Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. Why does logcheck still generate this error: [23:34:59]host1:/etc/logcheck/ignore.d.server# su -s /bin/bash -c "/usr/sbin/logcheck -t -o " logcheck System Events =-=-=-=-=-=-Jul 16 23:29:47 host1 spamd[927]: Argument "RBL" isn't numeric in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Conf.pm line 244. If i run "-d" i see that spamd is really included (How can i place that output of "su" into a file?) --------------------------------------- Received: (at 318731-close) by bugs.debian.org; 22 Aug 2005 20:45:56 +0000>From katie at spohr.debian.org Mon Aug 22 13:45:55 2005Return-path: <katie at spohr.debian.org> Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian)) id 1E7IyF-0002yD-00; Mon, 22 Aug 2005 13:32:39 -0700 From: Todd Troxell <ttroxell at debian.org> To: 318731-close at bugs.debian.org X-Katie: $Revision: 1.56 $ Subject: Bug#318731: fixed in logcheck 1.2.41 Message-Id: <E1E7IyF-0002yD-00 at spohr.debian.org> Sender: Archive Administrator <katie at spohr.debian.org> Date: Mon, 22 Aug 2005 13:32:39 -0700 Delivered-To: 318731-close at bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-CrossAssassin-Score: 6 Source: logcheck Source-Version: 1.2.41 We believe that the bug you reported is fixed in the latest version of logcheck, which is due to be installed in the Debian FTP archive: logcheck-database_1.2.41_all.deb to pool/main/l/logcheck/logcheck-database_1.2.41_all.deb logcheck_1.2.41.dsc to pool/main/l/logcheck/logcheck_1.2.41.dsc logcheck_1.2.41.tar.gz to pool/main/l/logcheck/logcheck_1.2.41.tar.gz logcheck_1.2.41_all.deb to pool/main/l/logcheck/logcheck_1.2.41_all.deb logtail_1.2.41_all.deb to pool/main/l/logcheck/logtail_1.2.41_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 318731 at bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Todd Troxell <ttroxell at debian.org> (supplier of updated logcheck package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster at debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 22 Aug 2005 15:27:45 -0500 Source: logcheck Binary: logcheck logtail logcheck-database Architecture: source all Version: 1.2.41 Distribution: unstable Urgency: low Maintainer: Debian logcheck Team <logcheck-devel at lists.alioth.debian.org> Changed-By: Todd Troxell <ttroxell at debian.org> Description: logcheck - mails anomalies in the system logfiles to the administrator logcheck-database - database of system log rules for the use of log checkers logtail - Print log file lines that have not been read Closes: 311216 312597 312598 312729 313601 313603 314951 315507 316612 317642 317741 317772 318500 318731 320009 321506 322036 322179 322570 Changes: logcheck (1.2.41) unstable; urgency=low . [ Jamie Penman-Smithson ] * Fix postfix rule to match "setting up TLS connection" messages again. * Fix innd rule for "ME time" messages, add rule for innfeed "ME time" messages. * Fix rules for gps to match messages with the null sender (<>). * Update cyrus/notifyd rule to match destination folders and subfolders too. * Update cyrus rules to suppress DBERROR db3: n lockers messages when it's only 1-2 lockers, these messages are harmless as long as the number doesn't increase. * Update postfix lmtp rule to match messages given by amavis when discarding UBE and viruses. * Fix bug in the squid rule for "found whitespace" messages which caused grep to choke due to unescaped { and } characters. (Closes: #311216) * Update innd nnrpd rule for latest version of INN. * Add a versioned dependency on grep to prevent bugs like #311216 happening in the first place. * Added Vietnamese translation, thanks to Clytie Siddall. (Closes: #312597) * Fix minor typo in logcheck-database.templates. (Closes: #312598) * Modify rules for successful ssh login messages to match when ssh/ssh2 is not specified at the end. (Closes: #312729) * Modified ignore.d.workstation/kernel to ignore nfs warnings about mount version. (Closes: #313601) * Fix postfix anvil rules to match max message/recipient rate and count messages. * Add the first rules for dkfilter, which implements domainkeys signing and verification for postfix. * Add rule for openssh-krb5 and add gssapi-with-mic to the list of auth alternatives. (Closes: #318500) * Add ovpn-tunnel rule to suppress "VERIFY OK: nsCertType=SERVER" messages. Thanks to Martin Lohmeier <martin at mein-horde.de>. (Closes: #320009) . [ Maximilian Attems ] * Suppress error message if hostname not set. (Closes: #314951) * Add another sshd rule for PARANOID /etc/hosts.deny setting. * Fix postfix rule concerning Service unavailable. (Closes: #315507) * Add some initial support for exim4 log messages. Pretty rudimentary stuff still, will need further refinements. (Closes: #316612) * First rule for amandad. (Closes: #313603) * Remention how to invoke logcheck with sudo. * Add an examples section to the manpage with my most usual invocation. * Fix rules for gconfd loglines. * Add rule for mailman admin loglines in violations.ignore.d/logcheck-postfix thanks toby cabot <toby at caboteria.org>. (Closes: #317772) * Fix hostname match in rbldnsd rule thanks sistemas at dedaloingenieros.com. (Closes: #317741) * Unifiy gdm rules, add a rule for X restart. * Beautify README.logcheck-database, uses markdown(1) syntax now. Added testing rules header to carify sections. (Closes: #317642, #318731) * Small manpage fixes. * Add 2 courier rules for ACCEPTED usernames and the started client module. * Add pdns rule for duplicate packets from recursor. * Fix cvs rule for exit code != 0. thanks Martin Lohmeier <martin at mein-horde.de> (Closes: #321506) * Fix hostname match in cups-lpd rules thanks Gilbert Laycock <gtl1 at mcs.le.ac.uk> (Closes: #322179) * Add horde3 rules for users login/logout thanks Martin Lohmeier <martin at mein-horde.de> (Closes: #322570) * Fix logcheck.8 rendering of docbook-to-man. (Closes: #322036) . [Todd Troxell] * Tweak descriptions to satisfy litian. Files: 1885143b4845e7da6dc748ef4f2ec7fb 736 admin optional logcheck_1.2.41.dsc 1a946e45f82a0dc98838c896510dfca9 101085 admin optional logcheck_1.2.41.tar.gz 4ec4e8c0a9227a8c06a716675f8a0d3f 47870 admin optional logcheck_1.2.41_all.deb 3bf53f05bfb119af9e2c1da3c8130f12 67460 admin optional logcheck-database_1.2.41_all.deb 078148d37c693d7dd9511355d70e7d40 29826 admin optional logtail_1.2.41_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFDCijR4u3oQ3FHP2YRAjnTAJwL7ztRs3iUx4sltg+pROJaxdf/QgCgtall nSanCABtCnyTfEYFeoyVZQ4=M6Pk -----END PGP SIGNATURE-----