Logcheck devel - Sep 2007 - Bug#443185: logcheck: support postfix check_helo_(mx|ns)_access

Package: logcheck-database
Version: 1.2.61
Severity: wishlist
Tags: patch

Current diff for postfix 2.3.

Sep 18 10:52:55 shemp postfix/smtpd[24083]: warning: Unable to look up MX host
for abo.wanadoo.fr: Host not found, try again
Sep 18 10:52:55 shemp postfix/smtpd[24083]: warning: Unable to look up NS host
for abo.wanadoo.fr: Host not found, try again
Sep 18 11:23:59 shemp postfix/smtpd[24961]: warning: Unable to look up MX host
for your4dacd0ea75.cfl.rr.com: Host not found
Sep 18 11:23:59 shemp postfix/smtpd[24961]: warning: Unable to look up NS host
for your4dacd0ea75.cfl.rr.com: Host not found

Sep 19 07:26:40 nyuk postfix/smtpd[22978]: warning: Unable to look up MX host
pinger.pingedin.com for Helo command pinger.pingedin.com: Name or service not
known

49,50c49,50
< ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable
to look up MX host for [._[:alnum:]-]+: Host not found(, try again)?$
< ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable
to look up MX host [._[:alnum:]-]+ for Sender address [^[:space:]]+: (Name or
service not known|No address associated with hostname)$
---
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable
to look up (NS|MX) host for [._[:alnum:]-]+: Host not found(, try again)?$
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable
to look up MX host [._[:alnum:]-]+ for (Helo command|Sender address)
[^[:space:]]+: (Name or service not known|No address associated with hostname)$

On Wed, Sep 19, 2007 at 09:15:05AM -0400, Justin Pryzby
wrote:
> Package: logcheck-database
> Version: 1.2.61
> Severity: wishlist
> Tags: patch
> 
> Current diff for postfix 2.3.
Just got the following:

Sep 19 08:04:31 nyuk postfix/smtpd[27004]: warning: Unable to look up NS host
ns1.bmuvie.gv.at for Sender address emulsions8237 at lsr-bgld.gv.at: Name or
service not known

Updated patch:

--- /tmp/postfix	2007-09-19 08:55:40.000000000 -0400
+++ /etc/logcheck/ignore.d.server/postfix	2007-09-19 10:04:39.000000000 -0400
@@ -46,8 +46,8 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: lost connection
after [[:upper:]]+ from
[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [[:upper:]0-9]+:
host [^[:space:]]+ said: .* \(in reply to (HELO|EHLO|MAIL FROM|RCPT TO|end of
DATA) command\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: warning: no MX host
for [^[:space:]]+ has a valid (A|address) record$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable to
look up MX host for [._[:alnum:]-]+: Host not found(, try again)?$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable to
look up MX host [._[:alnum:]-]+ for Sender address [^[:space:]]+: (Name or
service not known|No address associated with hostname)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable to
look up (NS|MX) host for [._[:alnum:]-]+: Host not found(, try again)?$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: Unable to
look up (NS|MX) host [._[:alnum:]-]+ for (Helo command|Sender address)
[^[:space:]]+: (Name or service not known|No address associated with hostname)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: warning: host
[^[:space:]]+ greeted me with my own hostname [._[:alnum:]-]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: warning: host
[^[:space:]]+ replied to HELO/EHLO with my own hostname [._[:alnum:]-]+$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: decided
action=DUNNO$