control: tags -1 + moreinfo
thanks
On Wed, 04 Jan 2012 09:58:11 +0100 Gabor Kiss <ki...@ssg.ki.iif.hu> wrote:
> /etc/logcheck/ignore.d.server/pure-ftpd rule
>
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pure-ftpd:
> \([._[:alnum:]-]+@[._[:alnum:]-]+\) \[INFO\] Logout\.$
>
> does not cover log entry
>
> Jan 4 07:23:42 gatling pure-ftpd: (?@203.158.197.21) [INFO] Logout.
>
> The problem is with ? before @.
It's a shame no-one replied to this bug from 2012
Is there still interest in adding this rule, and is the above still valid?
is the above message really harmless? it the bit before the @ is meant
to be a username then it looks like something fishy is going on and
this message should not be filtered?
