diff options
Diffstat (limited to 'logcheck')
| -rw-r--r-- | logcheck/ignore.d.server/local | 10 | ||||
| -rw-r--r-- | logcheck/ignore.d.server/tmp | 2 | ||||
| -rw-r--r-- | logcheck/violations.ignore.d/temp | 2 |
3 files changed, 7 insertions, 7 deletions
diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local index 36825b6..e9cfd0d 100644 --- a/logcheck/ignore.d.server/local +++ b/logcheck/ignore.d.server/local @@ -27,7 +27,7 @@ atalkd\[.*\]: .*: Network is unreachable named\[.*\]: .*: query\(.*\) NS points to CNAME \(.*\) dhcpd.*: Abandoning IP address .*: pinged before offer dhcpd.*: DHCPINFORM from [[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+( via eth.)? -dhcpd.*: DHCPNACK on [\.[:digit:]]+ to [:[anum:]]+( via eth.)? +dhcpd.*: DHCPNACK on [\.[:digit:]]+ to [:[alnum:]]+( via eth.)? dhcpd.*: DHCPRELEASE of .* from .* via dhcpd.*: Reclaiming( REQUESTed) abandoned IP address [[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+\. dhcpd.*: already acking lease @@ -77,11 +77,11 @@ postfix.* table has changed -- exiting postfix/smtp\[.*\]: .*: to=<.*>, relay=none, delay=[[:digit:]]+, status=deferred \(connect to .*\[.*\]: (Connection refused|server refused mail service)\) postfix/smtp\[.*\]: connect to .*\[.*\]: (Connection (refused|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\) postfix/smtp\[.*\]: warning: numeric domain name in resource data of MX record for .*: [\.[:digit:]]+ -postfix/smtp\[.*\]: warning: no MX host for [\.[:anum:]]+ has a valid A record -postfix/smtp\[.*\]: warning: host [\.[:anum:]]+\[[\.[:digit:]]+\] greeted me with my own hostname [\.[:anum:]]+ -postfix/smtpd\[.*\]: (lost connection|timeout) after [^ ]+ from [\.[:anum:]]+\[[\.[:digit:]]+\] +postfix/smtp\[.*\]: warning: no MX host for [\.[:alnum:]]+ has a valid A record +postfix/smtp\[.*\]: warning: host [\.[:alnum:]]+\[[\.[:digit:]]+\] greeted me with my own hostname [\.[:alnum:]]+ +postfix/smtpd\[.*\]: (lost connection|timeout) after [^ ]+ from [\.[:alnum:]]+\[[\.[:digit:]]+\] postfix/smtpd\[.*\]: warning: .*: address not listed for hostname .* -postfix/smtpd\[.*\]: warning: .*: hostname [\.[:anum:]]+ verification failed: Host (name has no address|not found) +postfix/smtpd\[.*\]: warning: .*: hostname [\.[:alnum:]]+ verification failed: Host (name has no address|not found) proftpd\[.*\]: .* \(.*\) - FTP session opened\. proftpd\[.*\]: .* \(.*\) - USER (anonymous|ftp) \(Login failed\): Can't find user\. smbd\[.*\]: read_socket_data: recv failure for 4\. Error = Connection reset by peer diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp index 60b1292..32728bf 100644 --- a/logcheck/ignore.d.server/tmp +++ b/logcheck/ignore.d.server/tmp @@ -15,7 +15,7 @@ ntpd\[.*\]: time reset [\.-[:digit:]]+ s PAM_unix\[.*\]: authentication failure; \(uid=0\) -> .* for (imap|netatalk|pop|samba|ssh) service portsentry\[.*\]: attackalert: .* smbd\[.*\]: \[.*\] passdb/pampass.c:smb_pam_passcheck\([[:digit:]]+\) -smbd\[.*\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:anum:]]+ ! +smbd\[.*\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:alnum:]]+ ! smbd[14793]: read_socket_data: recv failure for 4. Error = No route to host sshd\[.*]: Failed password for .* pumpd\[.*\]: SO_BINDTODEVICE eth0 \(4\) failed: Invalid argument diff --git a/logcheck/violations.ignore.d/temp b/logcheck/violations.ignore.d/temp index 2545af4..f34ed96 100644 --- a/logcheck/violations.ignore.d/temp +++ b/logcheck/violations.ignore.d/temp @@ -6,7 +6,7 @@ kernel: IP_MASQ:reverse ICMP: failed checksum from .*! kernel: Packet log: input DENY eth1 PROTO=1 0.0.0.0:5 10.0.0.40:1 L=427 S=0xD0 I=0 F=0x4000 T=255 \(#22\) PAM_unix\[.*\]: authentication failure; \(uid=0\) -> .* for (imap|netatalk|pop|samba|ssh) service portsentry\[.*\]: attackalert: .* -smbd\[.*\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:anum:]]+ ! +smbd\[.*\]: smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User [[:alnum:]]+ ! smbd[14793]: read_socket_data: recv failure for 4. Error = No route to host sshd\[.*]: Failed password for .* pumpd\[.*\]: SO_BINDTODEVICE eth0 \(4\) failed: Invalid argument |