Your message dated Sat, 05 May 2007 14:17:03 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#418449: fixed in logcheck 1.2.56
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: logcheck
Version: 1.2.54
When Postfix is configured to listen on port tcp/587 by uncommenting the
"submission" line in the postfix master.cf, logcheck does not ignore the
anvil statistics log entries - attached is a patch from the current SVN
trunk.
Index: rulefiles/linux/ignore.d.server/postfix
===================================================================
--- rulefiles/linux/ignore.d.server/postfix (revision 1531)
+++ rulefiles/linux/ignore.d.server/postfix (working copy)
@@ -79,7 +79,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: [[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)* relay=local, delay=[0-9]+, status=sent \(delivered to command: exec /usr/bin/procmail\)$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]: table hash:[^[:space:]]+\([-,|_[:alnum:]]+\) has changed -- restarting$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/policy-spf\[[0-9]+\]: : SPF pass: smtp_comment=.*: [.[:alnum:]]+ MX [.[:alnum:]]+ A [0-9a-f.:]+, header_comment=[.[:alnum:]+: domain of [%[:punct:][:alnum:[EMAIL PROTECTED]:alnum:]]+ designates [0-9a-f.:]{3,39} as permitted sender$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/anvil\[[0-9]+\]: statistics: max (message|recipient|connection) (count|rate) [/[:digit:]s]+ for \(([.:[:xdigit:]]+)?(smtp(s)?|25|587):[.:[:xdigit:]]+\) at \w{3} [ :0-9]{11}$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/anvil\[[0-9]+\]: statistics: max (message|recipient|connection) (count|rate) [/[:digit:]s]+ for \(([.:[:xdigit:]]+)?(smtp(s)?|25|submission|587):[.:[:xdigit:]]+\) at \w{3} [ :0-9]{11}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/anvil\[[0-9]+\]: statistics: max cache size [[:digit:]]+ at \w{3} [ :0-9]{11}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/scache\[[0-9]+\]: statistics: start interval \w{3} [ :0-9]{11}$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/scache\[[0-9]+\]: statistics: (domain|address) lookup hits=[0-9]+ miss=[0-9]+ success=[0-9]+%$
--- End Message ---
--- Begin Message ---
Source: logcheck
Source-Version: 1.2.56
We believe that the bug you reported is fixed in the latest version of
logcheck, which is due to be installed in the Debian FTP archive:
logcheck-database_1.2.56_all.deb
to pool/main/l/logcheck/logcheck-database_1.2.56_all.deb
logcheck_1.2.56.dsc
to pool/main/l/logcheck/logcheck_1.2.56.dsc
logcheck_1.2.56.tar.gz
to pool/main/l/logcheck/logcheck_1.2.56.tar.gz
logcheck_1.2.56_all.deb
to pool/main/l/logcheck/logcheck_1.2.56_all.deb
logtail_1.2.56_all.deb
to pool/main/l/logcheck/logtail_1.2.56_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
martin f. krafft <[EMAIL PROTECTED]> (supplier of updated logcheck package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 05 May 2007 16:01:16 +0200
Source: logcheck
Binary: logcheck logtail logcheck-database
Architecture: source all
Version: 1.2.56
Distribution: unstable
Urgency: low
Maintainer: Debian logcheck Team <[EMAIL PROTECTED]>
Changed-By: martin f. krafft <[EMAIL PROTECTED]>
Description:
logcheck - mails anomalies in the system logfiles to the administrator
logcheck-database - database of system log rules for the use of log checkers
logtail - Print log file lines that have not been read
Closes: 404852 413262 416971 418449 421525 421768 421913
Changes:
logcheck (1.2.56) unstable; urgency=low
.
* Thanks to Eric Evans and Russ Allbery for their contributions.
.
* ignore.d.server/dovecot:
- ignore additional, non-conventional comment to msgid on deliver message.
.
* ignore.d.server/openvpn:
- ignore messages related to tls-verify script.
- hide informational messages related to UDP.
- allow free-form tun names.
- handle multiple routes.
- ignore stuff related to tls-auth
- ignore ping-restart process respawn.
.
* ignore.d.server/postfix:
- updated an anvil stats pattern to match the submission service name in
addition to port 587, (closes: #418449). Thanks Michael Shuler.
- ignore more timeout and connection refused messages (closes: #404852).
- allow more logging information in connection failure messages.
- allow any message ID for cleanup; there are too many possibilities.
- make the DSN optional in remote accept messages.
- ignore numeric hostname and DNS lookup failures.
- ignore invalid octet count errors from trivial-rewrite.
- Postfix 2.4.0 now logs as error some of the deferral messages
formerly logged as qmgr.
- Fix typo in "while performing the HELO handshake" message.
- ignore all warnings about malformed domain names in resource data of
MX/CNAME records.
- ignore warnings about numeric hostnames by valid_hostname.
- ignore notice about generated sender delivery status notification.
- filter certificate warnings for smtp and smtpd.
- ignore warnings about timed out conversations.
- filter out qmgr undeliverable warnings.
- do not hardcode column names for mysql query; thanks Andreas Beckmann.
.
* violations.ignore.d/logcheck-postfix:
- smtpd_peer_init is optional before DNS failure messages.
- allow conn_use information in smtp failure messages.
- add another variation on remote message acceptance.
- allow more message IDs in cleanup log messages.
- Ignore qmgr message expiration messages.
.
* violations.ignore.d/logcheck-ssh:
- ignore host/address mismatch messages from TCP wrappers.
.
* ignore.d.server/ssh:
- also ignore backslashes in invalid/illegal user names.
.
* ignore.d.server/thttpd:
- ignore stats messages.
.
* ignore.d.server/spamd:
- ignore checking notice when there is no message-id ("unknown"); thanks
Fabian Fagerholm (closes: #421913).
.
* ignore.d.server/teapop:
- ignore messages by POP3 server; thanks to Stephan Windmüller
(closes: #421768)
.
* ignore.d.server/snort:
- ignore empty log lines; thanks to Johan Walles (closes: #413262).
.
* ignore.d.*/kernel, violations.ignore.d/logcheck-kernel:
- allow kernel timestamps (CONFIG_PRINTK_TIME); thanks to Samuel Thibault
(closes: #416971).
.
* Updated pt_BR debconf translation; thanks to Andr�� Lu��s Lopes
(closes: #421525).
Files:
2d0654edd89ccf70b46be08b5ab7bb15 811 admin optional logcheck_1.2.56.dsc
8fb0066cd0f984622dd47fae55201603 144779 admin optional logcheck_1.2.56.tar.gz
8f8f07b80d5bbf1c12aca9c3cba2584a 62460 admin optional logcheck_1.2.56_all.deb
acc1489c78a284c53c0027cfd9cfd165 99116 admin optional
logcheck-database_1.2.56_all.deb
0fed6797fa4a36458a1210ea86cf1513 43900 admin optional logtail_1.2.56_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGPI7FIgvIgzMMSnURArusAJ9Y/txPteUonuYHKnd2JUD95QMVDwCg4KFg
uqD30Z6ZJc++48JTTcTV/xU=
=L0AO
-----END PGP SIGNATURE-----
--- End Message ---
