Jan Evert van Grootheest
2006-Oct-31 15:39 UTC
[Logcheck-devel] Bug#396407: logcheck-database: Amandad line not ignored.
Package: logcheck-database Version: 1.2.47 Severity: normal The ignore.d.server/amandad file only ignores connections from hosts that cannot be found in DNS. My hosts are found in DNS, resulting in connection reports including host names as well as IP addresses. I would like to ask that connections to amandad with a hostname also be ignored. Below is an example of such a log (changed the hostname somewhat). Oct 31 15:00:02 suzy2 amandad[8783]: connect from aaaa.bbbb.homelinux.org (192.168.1.109) -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16-2-686-smp Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages logcheck-database depends on: ii debconf [debconf-2.0] 1.5.6 Debian configuration management sy logcheck-database recommends no packages. -- debconf information excluded
Apparently Analagous Threads
- Bug#391458: logcheck: Please provide a way to configure niceness of log scanning process
- Bug#503000: logcheck fails due to a perl warning
- Bug#608256: /etc/logcheck/ignore.d.server/dnsmasq: dnsmasq: interface names are allowed to have a dash (-) please add this to the filter
- Bug#703936: logcheck-database: SSH Bad Protocol Version Idenitifcation Rule is incomplete
- Bug#583155: logcheck-database: Please create rules for amavis(d-new)