Bug#300888: logcheck-database: database skip postgrey ignore pattern

2005-04-06 Thread Jamie L. Penman-Smithson
tags 300888 pending
thanks

On Tue, 2005-03-22 at 17:37 +0100, Sythos wrote:
> On Tue, Mar 22, 2005 at 04:01:45PM +, Jamie L. Penman-Smithson wrote:
> > > logcheck-database contain postgrey ignore file, but postgrey first
> > > attempt is listed in logcheck report
> > Can you provide the log messages that are not caught please?
> 
> Mar 22 16:43:10 vortex postfix/smtpd[19674]: NOQUEUE: reject: RCPT from

> I see in logcheck rules NOQUEUE should be ignored...

I've added the following rule to CVS which I've tested against the log
messages you gave me:

^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]:
[[:upper:]0-9]+: reject: RCPT from [^[:space:]]+: [45][0-9][0-9]
<[^[:space:]]+>: Client host rejected: Greylisted for 300 seconds \(see
http://isg.ee.ethz.ch/tools/postgrey/help/sythos.net.html\);
from=<[^[:space:]]*> to=<[^[:space:]]+> proto=(ESMTP|SMTP)
helo=<[^[:space:]]+>$

If in a future version of postgrey the message changes, this rule will
need to be updated. However, this means it can be tailored more - always
good for precious system resources.

Thanks for your bug report,

-- 
-jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED]
 w: http://www.silverdream.org | p: [EMAIL PROTECTED]
 pgp key @ http://silverdream.org/~jps/pub.key
 21:30:02 up 17 min,  2 users,  load average: 2.65, 2.52, 1.58



signature.asc
Description: This is a digitally signed message part


Bug#300888: logcheck-database: database skip postgrey ignore pattern

2005-03-22 Thread Sythos
On Tue, Mar 22, 2005 at 04:01:45PM +, Jamie L. Penman-Smithson wrote:
> > logcheck-database contain postgrey ignore file, but postgrey first
> > attempt is listed in logcheck report
> Can you provide the log messages that are not caught please?

Mar 22 16:43:10 vortex postfix/smtpd[19674]: NOQUEUE: reject: RCPT from
ms001msg.fastwebnet.it[213.140.2.51]: 450
: Client host rejected: Greylisted
for 300 seconds (see
http://isg.ee.ethz.ch/tools/postgrey/help/sythos.net.html);
from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> proto=ESMTP
helo=


I see in logcheck rules NOQUEUE should be ignored...

Regards
Sythos

-- 

Sythos - http://www.sythos.net
  ()  ASCII Ribbon Campaign - against html/rtf/vCard in mail
  /\- against M$ attachments


signature.asc
Description: Digital signature


Bug#300888: logcheck-database: database skip postgrey ignore pattern

2005-03-22 Thread Jamie L. Penman-Smithson
On Tue, 2005-03-22 at 15:29 +0100, Sythos wrote:
> logcheck-database contain postgrey ignore file, but postgrey first
> attempt is listed in logcheck report

Can you provide the log messages that are not caught please?

-- 
-jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED]
 w: http://www.silverdream.org | p: [EMAIL PROTECTED]
 pgp key @ http://silverdream.org/~jps/pub.key
 21:30:02 up 17 min,  2 users,  load average: 2.65, 2.52, 1.58



signature.asc
Description: This is a digitally signed message part


Bug#300888: logcheck-database: database skip postgrey ignore pattern

2005-03-22 Thread Sythos
Package: logcheck-database
Version: 1.2.35
Severity: minor

logcheck-database contain postgrey ignore file, but postgrey first
attempt is listed in logcheck report

$ dpkg -l postgrey
ii  postgrey   1.18-1


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.29-C3EZRA
Locale: LANG=it_IT, LC_CTYPE=it_IT (charmap=ISO-8859-1)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0] 1.4.46 Debian configuration management sy

-- debconf information:
* logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]