Logcheck devel - Aug 2011 - Bug#639839: please update amavisd-new rules

package: logcheck-database
version: 1.3.13
severity: wishlist

Hi,

basically daily I get system events like 

Aug 30 17:18:12 alpha amavis[25542]: (25542-18) Passed SPAM, [128.233.192.41]
[60.191.19.150]
<akeiaioiw32ewew at yahoo.de> -> <holger at layer-acht.org>,
quarantine: l/spam-lqVFlLbHc1ZN.gz, Message-ID:
<SHAREWEB13l6qKejmuF0000763f at SHAREWEB1.usask.ca>, mail_id:
lqVFlLbHc1ZN, Hits: 8.447, size: 3335, queued_as:
136AACACFE1, 458 ms

which are quite annoying. The supplied amavisd rules don't catch it and
my cusom local rules (attached) neither.

I'd be happy if you could point out the error in my rules as well updating
the packages rules.

Thanks for maintaining logcheck!


cheers,
 Holger
-------------- next part --------------
amavis\[[0-9]+\]: +(\([-0-9]+\) +)INFO: no existing header field
'Subject', inserting it$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*>
-> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>(
\((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID:
<[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size:
[[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed CLEAN,( \[(IPv6)?[.:[:xdigit:]]+\]){0,2}
<[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID:
<[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID:
<[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: -?[.[:digit:]]*, size:
[[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed SPAM,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> ->
<[^>]*>(,<[^>]*>)*,( quarantine: ?/spam-[-[:alnum:]]+.gz,
)(Message-ID: <[^>]+>)( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,(
Resent-Message-ID: <[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits:
(-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK
id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed SPAM,( \[(IPv6)?[.:[:xdigit:]]+\]){0,2}
<[^>]*> -> <[^>]*>(,<[^>]*>)*,( quarantine:
?/spam-[-[:alnum:]]+.gz,) Message-ID: <[^>]+>( \((added
by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)?
mail_id: [-+[:alnum:]]+, Hits: -?[.[:digit:]]*, size: [[:xdigit:]]+, queued_as:
[[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed UNCHECKED,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*>
-> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>(
\((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID:
<[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size:
[[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
\([-[:digit:]]+\) Passed UNCHECKED,( \[(IPv6)?[.:[:xdigit:]]+\]){0,2}
<[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID:
<[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID:
<[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: -?[.[:digit:]]*, size:
[[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$

Your message dated Thu, 08 Sep 2011 14:48:50 +0000
with message-id <E1R1fuM-0008SF-9f at franck.debian.org>
and subject line Bug#639839: fixed in logcheck 1.3.14
has caused the Debian Bug report #639839,
regarding please update amavisd-new rules
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
639839: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639839
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Holger Levsen <holger at layer-acht.org>
Subject: please update amavisd-new rules
Date: Tue, 30 Aug 2011 21:29:19 +0200
Size: 5609
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110908/2cfc703a/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Hannes von Haugwitz <hannes at vonhaugwitz.com>
Subject: Bug#639839: fixed in logcheck 1.3.14
Date: Thu, 08 Sep 2011 14:48:50 +0000
Size: 10012
URL:
<http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20110908/2cfc703a/attachment-0003.mht>