also sprach Stefan Schlesinger <debian at symbionis.at> [2006.11.22.1439
+0100]:> first test results from our system show that two more
> common log entries are not ignored by logcheck:
>
> Nov 22 14:24:29 imapsrv dovecot: auth(default): client in:
CONT<hidden>
> Nov 22 14:24:29 imapsrv dovecot: auth(default): client out: CONT 1
AAa0a000aaA0
Please try this patch:
Index: rulefiles/linux/ignore.d.server/dovecot
==================================================================---
rulefiles/linux/ignore.d.server/dovecot (revision 1382)
+++ rulefiles/linux/ignore.d.server/dovecot (working copy)
@@ -15,3 +15,7 @@
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth\(-_.[[:alnum:]]+\):
(pg|my)sql: Connected to [-_.[:alnum:]]+$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check pass;
user unknown$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([-_.@[:alnum:]]+\):
msgid=<[^[:space:]]+>: saved mail to [-_.[:alnum:]]+$
+# see #396760
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth\([[:alnum:]]+\): client
in: AUTH
[[:digit:]]+[[:space:]]+(PLAIN|plain|LOGIN|login|(CRAM|DIGEST)-MD5|(cram|digest)-md5)[[:space:]]+service=IMAP[[:space:]]+(secured
)?lip=[.:[:xdigit:]]+[[:space:]]+rip=[.:[:xdigit:]]+[[:space:]]+resp=<hidden>$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth\([[:alnum:]]+\): client
in: CONT<hidden>
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: auth\([[:alnum:]]+\): client
out: CONT[[:space:]]+[[:digit:]]+[[:space:]]+[[:alnum:]]+$
--
.''`. martin f. krafft <madduck at debian.org>
: :' : proud Debian developer, author, administrator, and user
`. `'` http://people.debian.org/~madduck - http://debiansystem.info
`- Debian - when you have better things to do than fixing systems
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature (GPG/PGP)
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20061212/2953a973/attachment.pgp