logcheck: Tweaks to dhcp, sorting the files. Update ChangeLog.

5 files changed, 267 insertions, 12 deletions

diff --git a/ChangeLog b/ChangeLog
index 090bffc..cdcfd0e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -9,6 +9,261 @@
 
 -- 
 
+2002-10-24 13:36  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: ignore.d.server/amavis, ignore.d.server/dhcp-client,
+	ignore.d.server/dhcp.changes, ignore.d.server/dhcp3-common,
+	ignore.d.server/local, ignore.d.server/netatalk.changes,
+	ignore.d.server/tmp, ignore.d.server/uw-imap.changes,
+	ignore.d.workstation/local, violations.ignore.d/dhcp-client,
+	violations.ignore.d/local, violations.ignore.d/postfix:
+
+	logcheck: More cleanup and a few updates.
+	
+2002-10-24 12:14  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: ignore.d.server/local, ignore.d.workstation/local,
+	violations.ignore.d/local:
+
+	logcheck: Update local-files.
+	
+2002-10-24 12:12  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: ignore.d.server/amavis, ignore.d.server/dhcp,
+	ignore.d.server/dhcp.changes, ignore.d.server/dhcp3-common,
+	ignore.d.server/proftpd, ignore.d.server/tmp,
+	ignore.d.server/uw-imap.changes, violations.ignore.d/postfix:
+
+	logcheck: Misc. improvements and .* extinguishing.
+	
+2002-10-24 08:59  Juri Jensen <juri@xenux.dk>
+
+	* bind/: named_XENUX_pri.conf, named_XENUX_sec.conf:
+
+	bind: Added ekspressiva.dk and -.com.
+	
+2002-10-24 08:17  Juri Jensen <juri@xenux.dk>
+
+	* bind/: named_XENUX_pri.conf, named_XENUX_sec.conf:
+
+	bind: Removed krogh-qualmann.dk.
+	
+2002-10-24 01:11  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: mklocalfiles, ignore.d.workstation/local,
+	violations.ignore.d/local:
+
+	logcheck: Include server lines in workstation (and not violations).
+	
+2002-10-24 01:04  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: mklocalfiles, ignore.d.server/local,
+	ignore.d.workstation/local, violations.ignore.d/local:
+
+	logcheck: Add dirty hack script to generate catch-all "local" files. Add generated "local" files as well.
+	
+2002-10-23 18:38  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/: named_SPIFF_pri.conf, named_SPIFF_sec.conf:
+
+	bind: Add new LAB domain plastographique.com.
+	
+2002-10-23 17:18  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/ignore.d.workstation/: gdm.da_DK, misc:
+
+	logcheck: Add a few files missed in the rename mess.
+	
+2002-10-23 17:17  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: ignore.d.server/amavis, ignore.d.server/anacron,
+	ignore.d.server/bind, ignore.d.server/bind.tmp,
+	ignore.d.server/dancer-ircd, ignore.d.server/dhcp-client,
+	ignore.d.server/dhcp3-common, ignore.d.server/hotplug,
+	ignore.d.server/hylafax-server, ignore.d.server/imp,
+	ignore.d.server/libpam-modules, ignore.d.server/local,
+	ignore.d.server/mailutils-imap4d, ignore.d.server/misc,
+	ignore.d.server/murasaki, ignore.d.server/netatalk,
+	ignore.d.server/netatalk.changes, ignore.d.server/non-debian,
+	ignore.d.server/ntp-simple.changes,
+	ignore.d.server/pop-before-smtp, ignore.d.server/postfix,
+	ignore.d.server/proftpd, ignore.d.server/samba,
+	ignore.d.server/squid, ignore.d.server/ssh, ignore.d.server/tmp,
+	ignore.d.server/uw-imap, ignore.d.server/uw-imap.changes,
+	ignore.d.workstation/bind, ignore.d.workstation/dhcp-client,
+	ignore.d.workstation/gconf.changes,
+	ignore.d.workstation/gconf.da_DK, ignore.d.workstation/gconfd,
+	ignore.d.workstation/gdm, ignore.d.workstation/hotplug,
+	ignore.d.workstation/libgnorba, ignore.d.workstation/local,
+	ignore.d.workstation/ntpdate, violations.ignore.d/bind,
+	violations.ignore.d/dhcp-client, violations.ignore.d/local,
+	violations.ignore.d/misc, violations.ignore.d/postfix,
+	violations.ignore.d/ssh, violations.ignore.d/temp:
+
+	
+	Major logcheck overhaul:
+	 * Split local into files by related packages
+	 * Rename remaining local to misc
+	 * Split language-specific (only da_DK) into package.lang
+	 * Sync with entries provided by packages themselves
+	 * Rename some files overriding (not add) to package.changes
+	 * Replace [[:digit:]] with the shorter [0-9] everywhere
+	 * Replace most .* to more specific alternatives everywhere
+	
+2002-10-22 17:24  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/: ignore.d.server/amanda, ignore.d.server/anacron,
+	ignore.d.server/bind, ignore.d.server/gdm,
+	ignore.d.server/gdm.da_DK, ignore.d.server/local,
+	ignore.d.server/murasaki, ignore.d.server/netatalk,
+	ignore.d.server/postfix, ignore.d.server/postgresql,
+	ignore.d.server/ppp, ignore.d.server/proftpd,
+	ignore.d.server/samba, ignore.d.server/squid, ignore.d.server/ssh,
+	ignore.d.server/ssmtp, ignore.d.server/tftpd, ignore.d.server/tmp,
+	ignore.d.server/ucd-snmp, ignore.d.server/uw-imap,
+	ignore.d.workstation/devfsd, ignore.d.workstation/gdm,
+	ignore.d.workstation/local, ignore.d.workstation/ntpdate,
+	ignore.d.workstation/pmud, violations.ignore.d/bind,
+	violations.ignore.d/pmud, violations.ignore.d/postfix,
+	violations.ignore.d/proftpd, violations.ignore.d/samba,
+	violations.ignore.d/ssh, violations.ignore.d/temp:
+
+	logcheck: Match only numerical pid numbers (.* is BAD in logcheck!).
+	
+2002-10-21 10:19  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/: named_SPIFF_pri.conf, SPIFF/ASCII33, SPIFF/JONES:
+
+	bind: Add domains asci33.com and ascii33.org. Move them and ascii33.net to JONES (and remove obsolete ASCII33).
+	
+2002-10-21 10:12  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/BITBASE/bitbase.dk:
+
+	bind: Add host admin.bitbase.dk.
+	
+2002-10-20 16:50  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/ignore.d.server/: postfix, ssh, tmp:
+
+	logcheck: Add pam entries removed in new logcheck (needed for woody).
+	
+2002-10-20 08:17  Jonas Smedegaard <dr@jones.dk>
+
+	* imp/servers.php3:
+
+	imp: Correct/add mail.107b.dk.
+	
+2002-10-19 21:20  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/fake/107b.dk:
+
+	bind: Add fake gyro.107b.dk.
+	
+2002-10-19 20:52  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/: SPIFF/107b.dk, fake/107b.dk, fake/192.168-107b.dk:
+
+	bind: Add admin.107b.dk and correct reverse katchup -> cherry.
+	
+2002-10-19 20:32  Jonas Smedegaard <dr@jones.dk>
+
+	* cfengine/cf.services.web:
+
+	cfengine: Add web php line to say 'AddType application/x-httpd-php .phtml .php .inc .php3'.
+	
+2002-10-19 19:06  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/: SPIFF/107b.dk, fake/107b.dk:
+
+	bind: rename katchup.107b.dk to cherry.107b.dk and add katchup with new (fake only) ip 102.64.
+	
+2002-10-16 16:20  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/BITBASE/hcfotografi.dk:
+
+	bind: Add hosts (www.)admin.hcfotografi.dk.
+	
+2002-10-16 16:18  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/BITBASE/hcfotografi.dk:
+
+	bind: Add host www.dev.hcfotografi.dk.
+	
+2002-10-16 16:10  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/BITBASE/hcfotografi.dk:
+
+	bind: Add host dev.hcfotografi.dk.
+	
+2002-10-16 04:58  Jonas Smedegaard <dr@jones.dk>
+
+	* cfengine/cf.groups.jones:
+
+	cfengine: Add cherry.107b.dk.
+	
+2002-10-15 19:03  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/ignore.d.workstation/gdm:
+
+	logcheck: Another gdm line for thin clients breaking/loosing connection.
+	
+2002-10-15 16:53  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/ignore.d.server/bind:
+
+	logcheck: Add another bind line.
+	
+2002-10-15 15:46  Jonas Smedegaard <dr@jones.dk>
+
+	* logcheck/violations.ignore.d/postfix:
+
+	logcheck: Add another postfix line.
+	
+2002-10-14 19:22  Jonas Smedegaard <dr@jones.dk>
+
+	* cfengine/cf.services.harden:
+
+	cfengine: Comment out all logcheck code - breaks with post-woody logcheck.
+	
+2002-10-14 19:18  Jonas Smedegaard <dr@jones.dk>
+
+	* cfengine/cf.services.harden:
+
+	cfengine: Comments translated to english and proper end-of-file.
+	
+2002-10-14 01:23  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/BITBASE/hcfotografi.dk:
+
+	bind: Correct mx for hcfotografi.dk.
+	
+2002-10-13 04:23  Jonas Smedegaard <dr@jones.dk>
+
+	* X11/light/prefs-kiosk.js, X11/oroborus/kiosk.oroborusrc,
+	gdm/Sessions/Kiosk, gdm/Sessions/SimpleKiosk:
+
+	Add files for kiosk-mode web-browser.
+	
+2002-10-13 02:22  Jonas Smedegaard <dr@jones.dk>
+
+	* X11/light/prefs-kiosk.js, X11/oroborus/kiosk.oroborusrc,
+	bind/fake/107b.dk:
+
+	Add files for kiosk-mode web-browser.
+	
+2002-10-11 16:05  Jonas Smedegaard <dr@jones.dk>
+
+	* bind/named_xayide.jones.dk.conf:
+
+	bind: xayide.jones.dk is *not* a SPIFF backup ns any longer.
+	
+2002-10-11 14:10  Jonas Smedegaard <dr@jones.dk>
+
+	* ChangeLog:
+
+	Update ChangeLog.
+	
 2002-10-11 14:08  Jonas Smedegaard <dr@jones.dk>
 
 	* bind/: named_SPIFF_pri.conf, named_SPIFF_sec.conf,
diff --git a/logcheck/ignore.d.server/dhcp.changes b/logcheck/ignore.d.server/dhcp.changes
index d452606..69bc5f5 100644
--- a/logcheck/ignore.d.server/dhcp.changes
+++ b/logcheck/ignore.d.server/dhcp.changes
@@ -1,7 +1,7 @@
 # NB: dhcp3 entries are in dhcp3-common
 dhcpd-2.2.x: Abandoning IP address [\.0-9]+: pinged before offer
 dhcpd-2.2.x: BOOTREQUEST from [:0-9a-f]+
-dhcpd-2.2.x: DHCP(ACK|NACK|OFFER) on [\.0-9]+ to [:0-9a-e]+ via eth[0-9]+
+dhcpd-2.2.x: DHCP(ACK|NACK|OFFER) on [\.0-9]+ to [:0-9a-f]+ via eth[0-9]+
 dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+
-dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [:0-9a-e]+ via eth[0-9]+ \((not )?found\)
+dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [:0-9a-f]+ via eth[0-9]+ \((not )?found\)
 dhcpd-2.2.x: DHCPREQUEST for .* from .* via eth[0-9]+
diff --git a/logcheck/ignore.d.server/dhcp3-common b/logcheck/ignore.d.server/dhcp3-common
index 76744e5..5360ef9 100644
--- a/logcheck/ignore.d.server/dhcp3-common
+++ b/logcheck/ignore.d.server/dhcp3-common
@@ -1,11 +1,11 @@
 dhcpd: Abandoning IP address [\.0-9]+: pinged before offer
 dhcpd: BOOTREQUEST from
-dhcpd: DHCP(ACK|NACN|OFFER) on [\.0-9]+ to [:0-9a-f]+ via eth[0-9]+
+dhcpd: DHCP(ACK|NACN|OFFER) on [\.0-9]+ to [:0-9a-f]+( \([^[:space:]]+\))? via eth[0-9]+
 dhcpd: DHCPACK to [\.0-9]+
 dhcpd: DHCPDISCOVER from [:0-9a-f]+ via eth[0-9]+
 dhcpd: DHCPINFORM from
 dhcpd: DHCPRELEASE of [\.0-9]+
-dhcpd: DHCPREQUEST for [\.0-9]+ from [:0-9a-f]+ via eth[0-9]+
+dhcpd: DHCPREQUEST for [\.0-9]+ from [:0-9a-f]+( \([^[:space:]]+\))? via eth[0-9]+
 dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.
 dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.
 dhcpd: accepting packet with data after udp payload.
diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local
index 33dc2ff..e938fe8 100644
--- a/logcheck/ignore.d.server/local
+++ b/logcheck/ignore.d.server/local
@@ -60,19 +60,19 @@ dhclient(-2.2.x)?: irda0: unknown hardware address type 783
 # NB: dhcp3 entries are in dhcp3-common
 dhcpd-2.2.x: Abandoning IP address [\.0-9]+: pinged before offer
 dhcpd-2.2.x: BOOTREQUEST from [:0-9a-f]+
-dhcpd-2.2.x: DHCP(ACK|NACK|OFFER) on [\.0-9]+ to [:0-9a-e]+ via eth[0-9]+
+dhcpd-2.2.x: DHCP(ACK|NACK|OFFER) on [\.0-9]+ to [:0-9a-f]+ via eth[0-9]+
 dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+
-dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [:0-9a-e]+ via eth[0-9]+ \((not )?found\)
+dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [:0-9a-f]+ via eth[0-9]+ \((not )?found\)
 dhcpd-2.2.x: DHCPREQUEST for .* from .* via eth[0-9]+
 ### ignore.d.server/dhcp3-common
 dhcpd: Abandoning IP address [\.0-9]+: pinged before offer
 dhcpd: BOOTREQUEST from
-dhcpd: DHCP(ACK|NACN|OFFER) on [\.0-9]+ to [:0-9a-f]+ via eth[0-9]+
+dhcpd: DHCP(ACK|NACN|OFFER) on [\.0-9]+ to [:0-9a-f]+( \([^[:space:]]+\))? via eth[0-9]+
 dhcpd: DHCPACK to [\.0-9]+
 dhcpd: DHCPDISCOVER from [:0-9a-f]+ via eth[0-9]+
 dhcpd: DHCPINFORM from
 dhcpd: DHCPRELEASE of [\.0-9]+
-dhcpd: DHCPREQUEST for [\.0-9]+ from [:0-9a-f]+ via eth[0-9]+
+dhcpd: DHCPREQUEST for [\.0-9]+ from [:0-9a-f]+( \([^[:space:]]+\))? via eth[0-9]+
 dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.
 dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.
 dhcpd: accepting packet with data after udp payload.
diff --git a/logcheck/ignore.d.workstation/local b/logcheck/ignore.d.workstation/local
index f136415..c7a6034 100644
--- a/logcheck/ignore.d.workstation/local
+++ b/logcheck/ignore.d.workstation/local
@@ -60,19 +60,19 @@ dhclient(-2.2.x)?: irda0: unknown hardware address type 783
 # NB: dhcp3 entries are in dhcp3-common
 dhcpd-2.2.x: Abandoning IP address [\.0-9]+: pinged before offer
 dhcpd-2.2.x: BOOTREQUEST from [:0-9a-f]+
-dhcpd-2.2.x: DHCP(ACK|NACK|OFFER) on [\.0-9]+ to [:0-9a-e]+ via eth[0-9]+
+dhcpd-2.2.x: DHCP(ACK|NACK|OFFER) on [\.0-9]+ to [:0-9a-f]+ via eth[0-9]+
 dhcpd-2.2.x: DHCPDISCOVER from .* via eth[0-9]+
-dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [:0-9a-e]+ via eth[0-9]+ \((not )?found\)
+dhcpd-2.2.x: DHCPRELEASE of [\.0-9]+ from [:0-9a-f]+ via eth[0-9]+ \((not )?found\)
 dhcpd-2.2.x: DHCPREQUEST for .* from .* via eth[0-9]+
 ### ignore.d.server/dhcp3-common
 dhcpd: Abandoning IP address [\.0-9]+: pinged before offer
 dhcpd: BOOTREQUEST from
-dhcpd: DHCP(ACK|NACN|OFFER) on [\.0-9]+ to [:0-9a-f]+ via eth[0-9]+
+dhcpd: DHCP(ACK|NACN|OFFER) on [\.0-9]+ to [:0-9a-f]+( \([^[:space:]]+\))? via eth[0-9]+
 dhcpd: DHCPACK to [\.0-9]+
 dhcpd: DHCPDISCOVER from [:0-9a-f]+ via eth[0-9]+
 dhcpd: DHCPINFORM from
 dhcpd: DHCPRELEASE of [\.0-9]+
-dhcpd: DHCPREQUEST for [\.0-9]+ from [:0-9a-f]+ via eth[0-9]+
+dhcpd: DHCPREQUEST for [\.0-9]+ from [:0-9a-f]+( \([^[:space:]]+\))? via eth[0-9]+
 dhcpd: ICMP Echo reply while lease [\.0-9]+ valid.
 dhcpd: Wrote [0-9]+ (leases|deleted host decls|new dynamic host decls) to leases file\.
 dhcpd: accepting packet with data after udp payload.