Logcheck devel - Oct 2007 - Bug#446356: does not ignore bind enforced delegation-only messages

Package: logcheck-database
Version: 1.2.62
Severity: normal
Tags: patch

When using the delegation-only feature of bind, it logs any offending
lookup that it forced to NXDOMAIN.
the following rule should be added to ignore.d.server/bind to ignore these:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: enforced delegation-only for
'[[:alnum:]]+' \([._[:alnum:]-]+/(A|AAAA)/IN\) from [0-9a-f.:]+#[0-9]+$

I had this in ignore.d.server/local-bind for quite a while and had to
add the AAAA now which reminded me to submit it. :)

elmar

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- debconf information excluded

-- 

 .'"`.                                                           
/"\
| :' :   Elmar Hoffmann <elho at elho.net>    ASCII Ribbon Campaign  \
/
`. `'    GPG key available via pgp.net        against HTML email   X
  `-                                                    & vCards  / \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20071012/1845a5eb/attachment.pgp

# Commit acfc5abe39855886333fe545182c5d56f04e455e
tag 446356 pending
thanks

In article <20071012131324.GI4646 at stranger.elho.net> you
wrote:
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: enforced
delegation-only for '[[:alnum:]]+' \([._[:alnum:]-]+/(A|AAAA)/IN\) from
[0-9a-f.:]+#[0-9]+$
Thanks!  I adjusted this rule slightly, to allow for zones other than
TLDs.


-- 
<dark> eat Depends: cook | eat-out.
       But eat-out is non-free so that's out.
       And cook Recommends: clean-pans.
		-- Seen on #Debian

Processing commands for control at bugs.debian.org:
> # Commit acfc5abe39855886333fe545182c5d56f04e455e
> tag 446356 pending
Bug#446356: does not ignore bind enforced delegation-only messages
Tags were: patch
Tags added: pending
> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Your message dated Mon, 7 Jul 2008 20:03:48 +0200
with message-id <20080707180348.GA13954 at edna.gwendoline.at>
and subject line Re: Bug#446356: does not ignore bind enforced delegation-only
messages
has caused the Debian Bug report #446356,
regarding does not ignore bind enforced delegation-only messages
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
446356: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446356
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Elmar Hoffmann <elho at elho.net>
Subject: does not ignore bind enforced delegation-only messages
Date: Fri, 12 Oct 2007 15:13:24 +0200
Size: 3114
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080707/09917ed6/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: Gerfried Fuchs <rhonda at deb.at>
Subject: Re: Bug#446356: does not ignore bind enforced delegation-only
	messages
Date: Mon, 7 Jul 2008 20:03:48 +0200
Size: 2240
Url:
http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20080707/09917ed6/attachment-0001.eml