Hi!
* Patrice Le Gurun <patr...@legurun.org> [2010-01-02 08:07:13 CET]:
> Correction for my patch :
> It's "( LOCAL)+" and not "( LOCAL,)+" (the comma is wrong)
>
> So the full line for logcheck is :
> > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]:
> > \([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> ->
> > <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added
> > by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id:
> > [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as:
> > [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$
Are you sure about that, shouldn't it be rather "( LOCAL)?" instead?
Your + means "once or more", a ? would mean "none or once" which sounds
more appropriate from your initial mail?
If you can clearify on that I'll add the change to the logcheck package
that reintegrates the rules.
Thanks,
Rhonda
--
"Lediglich 11 Prozent der Arbeitgeber sind der Meinung, dass jeder
Mensch auch ein Privatleben haben sollte."
-- http://www.karriere.at/artikel/884/
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
