From 3a020a00a72ee986aaacce4b8128d939ec34f754 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Thu, 24 Aug 2006 10:10:06 +0000 Subject: Ignore more postfix foul language within addresses. --- logcheck/violations.ignore.d/postfix | 1 + 1 file changed, 1 insertion(+) (limited to 'logcheck/violations.ignore.d/postfix') diff --git a/logcheck/violations.ignore.d/postfix b/logcheck/violations.ignore.d/postfix index ed5ec2b..724e3f0 100644 --- a/logcheck/violations.ignore.d/postfix +++ b/logcheck/violations.ignore.d/postfix @@ -19,3 +19,4 @@ # Suspiciously worded hostname or email address is not a security thread ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[[:alnum:]]+\[[0-9]+\]: ([[:xdigit:]]+|NOQUEUE): ([^[:space:]]+=[^[:space:]]+, )*(from|helo|message-id|to)=<[^>]*(attack|BAD|debug|denied|deny|error|expn|promisc|refused)[^>]*>.*$ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/[[:alnum:]]+\[[0-9]+\]: warning: no MX host for [^[:space:]]*(attack|BAD|debug|denied|deny|error|expn|promisc|refused)[^[:space:]]* has a valid A record$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtp+\[[0-9]+\]: connect to [^[:space:]]*(attack|BAD|debug|denied|deny|error|expn|promisc|refused)[^[:space:]]*:.*$ -- cgit v1.2.3