Your message dated Tue, 28 Nov 2006 23:02:05 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#399864: fixed in logwatch 7.3.1-4
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: logwatch
Version: 7.3-2
Severity: minor
Tags: patch
With 0.7.4 version of fail2ban in unstable (and soon in testing
hopefully) logwatch script for fail2ban has to be patched due to
change of logging format in fail2ban (I have tried to make patch as
minimal as possible)
For some reason (I mean that there might be a good reason for it which
I am not aware of) LogFile in
/usr/share/logwatch/default.conf/logfiles/fail2ban.conf,
as it is shipped now, doesn't have an extension (.log). I found that it
forbids logwatch to work, thus my patch also patches .conf file by
adding .conf to LogFile entry.
P.S. If something wrong with an attachment (since I am afraid my emacs
is about screw it up) - please find it at
http://www.onerussian.com/debian/patches/logwatch_7.3.1_fail2ban_0.7.x-2.diff
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (990, 'unstable'), (300, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages logwatch depends on:
ii exim4-daemon-light [mail-tran 4.63-3 lightweight exim MTA (v4) daemon
ii perl 5.8.8-6.1 Larry Wall's Practical Extraction
logwatch recommends no packages.
-- debconf-show failed
--Yarik
===File ~/logwatch_7.3.1_fail2ban_0.7.x-2.diff==============
diff -Naur logwatch-7.3.1.orig/conf/logfiles/fail2ban.conf
logwatch-7.3.1/conf/logfiles/fail2ban.conf
--- logwatch-7.3.1.orig/conf/logfiles/fail2ban.conf 2006-05-30
15:04:26.000000000 -0400
+++ logwatch-7.3.1/conf/logfiles/fail2ban.conf 2006-11-21 12:58:35.000000000
-0500
@@ -20,6 +20,6 @@
Title = fail2ban-messages
# Which logfile group...
-LogFile = fail2ban
+LogFile = fail2ban.log
diff -Naur logwatch-7.3.1.orig/scripts/services/fail2ban
logwatch-7.3.1/scripts/services/fail2ban
--- logwatch-7.3.1.orig/scripts/services/fail2ban 2006-05-30
15:04:26.000000000 -0400
+++ logwatch-7.3.1/scripts/services/fail2ban 2006-11-22 09:46:49.000000000
-0500
@@ -36,7 +36,9 @@
}
chomp($ThisLine);
if ( ($ThisLine =~ /..,... DEBUG: /) or
+ ($ThisLine =~ /..,... \S*\s*: DEBUG /) or # syntax of 0.7.? fail2ban
($ThisLine =~ /..,... INFO: (Fail2Ban v.* is running|Exiting|Enabled
sections:)/) or
+ ($ThisLine =~ /..,... \S+\s*: INFO\s+(Set
|Socket|Exiting|Gamin|Created|Added|Using)/) or # syntax of 0.7.? fail2ban
($ThisLine =~ /..,... WARNING: Verbose level is /) or
($ThisLine =~ /..,... WARNING: Restoring firewall rules/)
)
@@ -44,7 +46,7 @@
if ( $Debug >= 6 ) {
print STDERR "DEBUG($DebugCounter): line ignored\n";
}
- } elsif ( my ($Service,$Action,$Host) = ($ThisLine =~
m/WARNING:\s(.*):\s(Ban|Unban)[^\.]* (\S+)/)) {
+ } elsif ( my ($Service,$Action,$Host) = ($ThisLine =~
m/WARNING:?\s\[?(.*?)[]:]?\s(Ban|Unban)[^\.]* (\S+)/)) {
if ( $Debug >= 6 ) {
print STDERR "DEBUG($DebugCounter): Found $Action for $Service from
$Host\n";
}
@@ -59,9 +61,10 @@
$ServicesBans{$Service}{$Host}{'AlreadyInTheList'}++;
} elsif ( my ($Service,$Host) = ($ThisLine =~ m/ WARNING:\s(.*):\sReBan
(\S+)/)) {
$ServicesBans{$Service}{$Host}{'ReBan'}++;
- } elsif ($ThisLine =~ /..,... ERROR: (Execution of command )?\'iptables/) {
+ } elsif ($ThisLine =~ / ERROR:?\s*(Execution of command )?\'?iptables/) {
push @IptablesErrors, "$ThisLine\n";
- } elsif ($ThisLine =~ /..,... WARNING: \#\S+ reinitialization of
firewalls/) {
+ } elsif (($ThisLine =~ /..,... WARNING: \#\S+ reinitialization of
firewalls/) or
+ ($ThisLine =~ / ERROR\s*Invariant check failed. Trying to restore
a sane environment/)) {
$ReInitializations++;
} elsif ($ThisLine =~ /..,... WARNING: is not a valid IP address/) {
# just ignore - this will be fixed within fail2ban and is harmless
warning
============================================================
--- End Message ---
--- Begin Message ---
Source: logwatch
Source-Version: 7.3.1-4
We believe that the bug you reported is fixed in the latest version of
logwatch, which is due to be installed in the Debian FTP archive:
logwatch_7.3.1-4.diff.gz
to pool/main/l/logwatch/logwatch_7.3.1-4.diff.gz
logwatch_7.3.1-4.dsc
to pool/main/l/logwatch/logwatch_7.3.1-4.dsc
logwatch_7.3.1-4_all.deb
to pool/main/l/logwatch/logwatch_7.3.1-4_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Willi Mann <[EMAIL PROTECTED]> (supplier of updated logwatch package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 28 Nov 2006 20:53:42 +0100
Source: logwatch
Binary: logwatch
Architecture: source all
Version: 7.3.1-4
Distribution: unstable
Urgency: low
Maintainer: Willi Mann <[EMAIL PROTECTED]>
Changed-By: Willi Mann <[EMAIL PROTECTED]>
Description:
logwatch - log analyser with nice output written in Perl
Closes: 399864
Changes:
logwatch (7.3.1-4) unstable; urgency=low
.
* fail2ban updated, (for new fail2ban upstream and the log filename was
wrong)
thanks Yaroslav Halchenko (closes: #399864)
* additional infos in README.Debian.
Files:
cca3102e0daf654a237e98d341ff36e5 560 admin optional logwatch_7.3.1-4.dsc
079f51175eb57c653672d66db95b5afe 18084 admin optional logwatch_7.3.1-4.diff.gz
493d14a80fb514a5a796164ab59d76ae 248800 admin optional logwatch_7.3.1-4_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFFbL3ppdwBkPlyvgMRAu4dAJwOnQ5c44mhEwEvTRYrPwS2QIvgCgCZAQ78
6P2qG2P7BmQIMHKN/u+mKgk=
=TPTs
-----END PGP SIGNATURE-----
--- End Message ---
