diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2006-01-04 12:12:09 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2006-01-04 12:12:09 +0000 |
| commit | e52d07018dd26c91efa5d45c8b4543ed14edc9cd (patch) | |
| tree | 965900ed2d6cdf9bbe4797026a5fcda03e5c40c7 /logcheck/violations.ignore.d/postfix | |
| parent | 6655f0a6b890012d3ff1697c9cc2bafb05b7981c (diff) | |
Ignore the bad-word 'BAD' within email addresses.
Diffstat (limited to 'logcheck/violations.ignore.d/postfix')
| -rw-r--r-- | logcheck/violations.ignore.d/postfix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/logcheck/violations.ignore.d/postfix b/logcheck/violations.ignore.d/postfix index cf2e000..fa6f2da 100644 --- a/logcheck/violations.ignore.d/postfix +++ b/logcheck/violations.ignore.d/postfix @@ -35,5 +35,5 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning:( smtpd_peer_init:)? [\.0-9]+: hostname [^[:space:]]+ verification failed: (Name or service not known|Temporary failure in name resolution)$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [^[:space:]]+: reject: (DATA|RCPT) from [^[:space:]]+\[[\.0-9]+\]: [45][0-9]{2}( [^;]+;){1,3} from=<[^>]*>( to=<[^>]*>)? proto=E?SMTP( helo=<[^>]*>)?$ # Suspicious words within email addresses are ok -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[[:alnum:]]+\[[0-9]+\]:.* (from|helo|message\-id|to)=<[^>[:space:]]*(attack|debug|deny|error|expn|refused)[^>[:space:]]*>.*$ -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[[:alnum:]]+\[[0-9]+\]: warning: no MX host for [^[:space:]]*(attack|debug|deny|error|expn|refused)[^[:space:]]* has a valid A record$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[[:alnum:]]+\[[0-9]+\]:.* (from|helo|message\-id|to)=<[^>[:space:]]*(attack|BAD|debug|deny|error|expn|refused)[^>[:space:]]*>.*$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[[:alnum:]]+\[[0-9]+\]: warning: no MX host for [^[:space:]]*(attack|BAD|debug|deny|error|expn|refused)[^[:space:]]* has a valid A record$ |