Package: whitelister
Version: 0.8-4
Severity: normal
Tags: patch
The logcheck rule currently shipping with whitelister is a bit leaky -
it lets through some "DUNNO" status lines, and also doesn't handle
whitelister's SPF checking functionality.
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.24-etchnhalf.1-amd64
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Versions of packages whitelister depends on:
ii libc6 2.3.6.ds1-13etch7 GNU C Library: Shared libraries
ii libspf0 0.999-1.0.0-p3-3 the ANSI C SPF reference library (
whitelister recommends no packages.
-- debconf-show failed
--- /u3/sid-amd64/etc/logcheck/ignore.d.server/whitelister 2007-01-07
16:28:37.000000000 +0000
+++ /etc/logcheck/ignore.d.server/whitelister 2008-09-19 09:22:17.000000000
+0100
@@ -1,4 +1,4 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: Clean$
-\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: listening to
inet:[:.[:xdigit:]]+:[[:digit:]]$
-\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: listening to
unix:[-/._[:alnum:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: Dirty: RCPT from
[[:alnum:[EMAIL PROTECTED]: DUNNO \(blacklisted by [[:alnum:].]+\);
from=<[[:alnum:[EMAIL PROTECTED]> to=<[[:alnum:[EMAIL PROTECTED]> proto=SMTP
helo=<[[:alnum:[EMAIL PROTECTED]>$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: listening to
inet:[:.[:xdigit:]]+:[[:digit:]]$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: listening to
unix:[-/._[:alnum:]]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ whitelister\[[0-9]+\]: (Dirty|Reject): RCPT
from [._[:alnum:]-]+\[([0-9.]{7,15}|[0-9a-fA-F:.]{4,39})\]: (DUNNO
\(.*\)|REJECT SPF.*); from=<.*> to=<.*> proto=E?SMTP helo=<.*>$
