From 76de7766b12f3ca73b825faf6a37e77b229ae6ff Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Thu, 14 Mar 2002 11:30:44 +0000 Subject: logcheck: Misc temp. snort-related (and other) additions. --- logcheck/ignore.d.server/postfix | 1 + logcheck/ignore.d.server/tmp | 5 +++++ 2 files changed, 6 insertions(+) (limited to 'logcheck/ignore.d.server') diff --git a/logcheck/ignore.d.server/postfix b/logcheck/ignore.d.server/postfix index e9dff94..94eeb10 100644 --- a/logcheck/ignore.d.server/postfix +++ b/logcheck/ignore.d.server/postfix @@ -1,4 +1,5 @@ postfix.* table has changed -- exiting +postfix/cleanup\[.*\]: warning: premature end-of-input from cleanup socket while reading input attribute name postfix/local\[.*\]: warning: unable to create lock file /var/mail/[[:alnum:]]+\.lock: Permission denied postfix/smtp\[.*\]: .*: to=<.*>, relay=none, delay=[[:digit:]]+, status=deferred \(connect to .*\[.*\]: (Connection refused|server refused mail service)\) postfix/smtp\[.*\]: connect to .*\[.*\]: (Connection (refused|timed out)|read timeout|server (refused mail service|dropped connection)|No route to host) \(port 25\) diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp index f080db9..805ae4d 100644 --- a/logcheck/ignore.d.server/tmp +++ b/logcheck/ignore.d.server/tmp @@ -39,3 +39,8 @@ snort: IIS- snort: FrontPage- snort: spp_portscan: portscan status from snort: IDS246 - MISC - Large ICMP Packet: +snort: NETBIOS-SMB-C: +snort: NETBIOS-SMB-CD...: +snort: spp_portscan: PORTSCAN DETECTED +snort: spp_portscan: End of portscan +snort: IDS029 - SCAN-Possible Queso Fingerprint attempt: -- cgit v1.2.3