diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2004-02-22 10:23:41 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2004-02-22 10:23:41 +0000 |
| commit | 2bb63b0b81fb7aec533eaf645591426662e17124 (patch) | |
| tree | 0b972a4acc300ac0c324c8af136582e047d1ae2c /logcheck/ignore.d.server/misc | |
| parent | ae37e39e2ccfac4f25624a62e5f82e963a4f18a4 (diff) | |
Tighten all rules to strict left side, based on su rules.
Diffstat (limited to 'logcheck/ignore.d.server/misc')
| -rw-r--r-- | logcheck/ignore.d.server/misc | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/logcheck/ignore.d.server/misc b/logcheck/ignore.d.server/misc index 5d2ec5d..fa4f07c 100644 --- a/logcheck/ignore.d.server/misc +++ b/logcheck/ignore.d.server/misc @@ -1,11 +1,11 @@ # Figure out if these belong to dhcp or dhcp3-common (or dhclient?) -dhcpd.*: Reclaiming( REQUESTed) abandoned IP address [\.0-9]+ -dhcpd.*: already acking lease -dhcpd.*: send_packet: Connection refused -dhcpd.*: fallback_discard: Connection refused +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd.*: Reclaiming( REQUESTed) abandoned IP address [\.0-9]+ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd.*: already acking lease +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd.*: send_packet: Connection refused +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dhcpd.*: fallback_discard: Connection refused # These show up when isdnutils is installed, but isn't strictly related to those packages -kernel: isdn_net: call from [,0-9]+ -> [0-9]+$ -kernel: isdn_net: Service-Indicator not [0-9], ignored$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: isdn_net: call from [,0-9]+ -> [0-9]+$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: isdn_net: Service-Indicator not [0-9], ignored$ # This one shows up with firewalls blocking SMB ports non-silently -kernel: Packet log: input DENY .*:(137|138) .*:(137|138) .*$ -kernel: Shorewall:net2all:DROP:.* (SPT|DPT)=(13[789]|445) .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Packet log: input DENY .*:(137|138) .*:(137|138) .*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ kernel: Shorewall:net2all:DROP:.* (SPT|DPT)=(13[789]|445) .*$ |