package logcheck-database tags 368313 pending thanks On 21 May 2006, at 12:45, Martin Lohmeier wrote:
I'd like to add the following rule to /etc/logcheck/ violations.ignore.d/logcheck-postfix :^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: NOQUEUE: reject: RCPT from [._[:alnum:]-]+\[[0-9]{1,3}\.[0-9]{1,3}\. [0-9]{1,3}\.[0-9]{1,3}\]: 554 <[._[:alnum:]-]+\[[0-9]{1,3}\.[0-9] {1,3}\.[0-9]{1,3}\.[0-9]{1,3}\]>: Client host rejected: Access denied; from=<.*> to=<.*> proto=(SMTP|ESMTP) helo=<.*>$The attached file contain a few line that should be ignored.
I've added the following rule to violations.ignore.d/logcheck- postfix, which matches the log messages you provided:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: NOQUEUE: reject: RCPT from [^[:space:]]+: 554 <[^[:space:]]+>: Client host rejected: Access denied; from=<[^[:space:]]+> to=<[^[:space:]]+> proto=E?SMTP helo=<[^[:space:]]+>$
It'll be included in the next release. Thanks for your bug report, -j
PGP.sig
Description: This is a digitally signed message part
