summaryrefslogtreecommitdiff
path: root/logcheck/violations.ignore.d
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2013-01-30 10:29:51 +0100
committerJonas Smedegaard <dr@jones.dk>2013-01-30 10:30:11 +0100
commite25e815689670be2b13c8c193a774c19f54a3e8a (patch)
tree842d3a964d4d742e45451bcbf3577f38b62087a5 /logcheck/violations.ignore.d
parent592fdbc6b3c9105274e3a4c09c5614b58559f833 (diff)
Add some logcheck rules for dovecot lda, amavisd-new and postfix.
Diffstat (limited to 'logcheck/violations.ignore.d')
-rw-r--r--logcheck/violations.ignore.d/amavisd-new2
-rw-r--r--logcheck/violations.ignore.d/postfix2
2 files changed, 2 insertions, 2 deletions
diff --git a/logcheck/violations.ignore.d/amavisd-new b/logcheck/violations.ignore.d/amavisd-new
index 38b08d5..71f608c 100644
--- a/logcheck/violations.ignore.d/amavisd-new
+++ b/logcheck/violations.ignore.d/amavisd-new
@@ -7,4 +7,4 @@
#^\w{3} [ :0-9]{11} [._[:alnum:]-]+ amavis\[[0-9]+\]: \([0-9-]+\) mail_via_smtp: 550 5\.1\.0 <[^[:space:]]*>: Recipient address rejected: User unknown in virtual alias table$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ amavis\[[0-9]+\]: \([0-9-]+\) INFO: unfolded [0-9]+ illegal all-whitespace continuation lines$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ amavis\[[0-9]+\]: \([0-9-]+\) (Blocked|Passed) (BAD-HEADER|CLEAN|SPAM(MY)?)(, \[[\.0-9]+\])? <[^[:space:]]*> -> <[^[:space:]]*>(, (quarantine|Message-ID|mail_id|Hits|queued_as): [^[:space:]]+)+, [0-9]+ ms$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ amavis\[[0-9]+\]: \([0-9-]+\) (Blocked|Passed) (BAD-HEADER|CLEAN|SPAM(MY)?)( {RelayedInbound})?(, \[[\.0-9]+\])? <[^[:space:]]*> -> <[^[:space:]]*>(, (quarantine|(Resent-)?Message-ID|mail_id|Hits|size|queued_as): [^[:space:]]+)+, [0-9]+ ms$
diff --git a/logcheck/violations.ignore.d/postfix b/logcheck/violations.ignore.d/postfix
index 166f43b..31e526f 100644
--- a/logcheck/violations.ignore.d/postfix
+++ b/logcheck/violations.ignore.d/postfix
@@ -3,7 +3,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/(local|smtpd)\[[0-9]+\]: warning: [\.0-9]+: hostname [^[:space:]]+ verification failed: .*$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/(local|smtpd)\[[0-9]+\]: warning: reject: ETRN [^[:space:]]+\.\.\. from [^[:space:]]+\[[\.0-9]+\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[ls]mtp\[[0-9]+\]: [[:xdigit:]]+: ((to|orig_to|relay|conn_use|delay|delays|dsn)=[^[:space:]]+, )+status=(sent|bounced|deferred) \((\(.*\)|[^\(\)]*)*\)( proto=E?SMTP helo=<[^>]*>)?$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: ([[:xdigit:]]+|NOQUEUE): (filter|reject): (DATA|MAIL|RCPT) from [^[:space:]]+\[[\.0-9]+\]: .*$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix(/submission)?/smtpd\[[0-9]+\]: ([[:xdigit:]]+|NOQUEUE): (filter|reject): (DATA|MAIL|RCPT) from [^[:space:]]+\[[\.0-9]+\]: .*$
# Certificate handling is non-fatal
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp\[[0-9]+\]: [[:xdigit:]]+: Cannot start TLS: handshake failure$