Armin Berres
2007-Feb-10 15:05 UTC
[Logcheck-devel] Bug#410416: logcheck-database: extended policyd-rules
Package: logcheck-database
Severity: wishlist
Tags: patch
Please consider applying the attached patch.
Now policyd-weight should be completely ignored.
/Armin
-- System Information:
Debian Release: 4.0
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1,
'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/dash
Kernel: Linux 2.6.18-99
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
-------------- next part --------------
Index: ignore.d.server/postfix
==================================================================---
ignore.d.server/postfix (revision 1491)
+++ ignore.d.server/postfix (working copy)
@@ -110,5 +110,6 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: sql plugin
Parse the username [^[:space:]]+$
# policyd-weight
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]:
decided action=PREPEND X-policyd-weight: using cached result; rate:
(-)?[[:digit:].]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]:
decided action=(450 |550) (Mail appeared to be SPAM or forged. Ask your
Mail/DNS-Administrator to correct HELO and DNS MX settings or to get removed
from DNSBLs(; in [^[:space:]]+)*|Your MTA is listed in too many DNSBLs; check
[^[:space:]]+)$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]:
(weighted check|decided action=PREPEND X-policyd-weight):
([_[:alpha:]]+=(-)?[[:digit:].]+ )+\(check from: [^[:space:]]+ - helo:
[^[:space:]]+ - helo-domain: [^[:space:]]+\)
([\()/_[:alpha:]]+=(-)?[[:digit:].]+ )+<client=[^[:space:]]+>
<helo=[^[:space:]]+> <from=[^[:space:]]+> <to=[^[:space:]]+>,
rate: (-)?[[:digit:].]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]:
decided action=(450 |550) (Mail appeared to be SPAM or forged. Ask your
Mail/DNS-Administrator to correct HELO and DNS MX settings or to get removed
from DNSBLs(; (in [^[:space:]]+|MTA helo: [^[:space:]]+, MTA hostname:
[^[:space:]]+ \(helo/hostname mismatch\)))*|Your MTA is listed in too many
DNSBLs; check [^[:space:]]+)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]:
(weighted check|decided action=PREPEND X-policyd-weight):
([_[:alpha:]]+=((-)?[[:digit:].]+|ERR) )+(\(check from: [^[:space:]]+ - helo:
[^[:space:]]+ - helo-domain: [^[:space:]]+\)
([\()/_[:alpha:]]+=(-)?[[:digit:].]+ )+)*<client=[^[:space:]]+>
<helo=[^[:space:]]+> <from=[^[:space:]]+> <to=[^[:space:]]+>,
rate: (-)?[[:digit:].]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policyd-weight\[[[:digit:]]+\]:
cache: (purged|deleted) [^[:space:]]+ from HAM cache$