package logcheck-database
retitle 310423 logcheck-database: rules for dovecot are incomplete
tags 310423 pending
thanks

On Mon, 2005-05-23 at 23:11 +0200, Robbert Muller wrote:
> Jamie L. Penman-Smithson wrote:
> > Could you provide some messages for the dovecot pop3 server?
> 
> the same as imap ;-)
>
> the rules i made
> ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ pop3-login: Login: [.[:alnum:[EMAIL 
> PROTECTED] 
> \[[0-9.]+\]$
<snip>
> the only type of line i got till now
> May 23 22:54:59 host pop3-login: Login: [EMAIL PROTECTED] [10.10.10.10]

I've modified the rules in CVS for dovecot to match messages from the
pop3 daemon too:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Login:
[.[:alnum:[EMAIL PROTECTED] \[[0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)-login: Disconnected
\[[0-9.]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ (imap|pop3)\([^[:space:]]+\): File
isn't in mbox format: [^[:space:]]+$

Thanks for your bug report,

-- 
-Jamie L. Penman-Smithson <[EMAIL PROTECTED]>
 t: +44 1273 424795; f: +44 1273 424795
 PGP: C0A7 955E EED6 A309 23D7 863B C76A 26A3 F0DC FCA8
 never send mail to: [EMAIL PROTECTED]

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to