Hi Richard,

On Sun, May 12 2024, Richard Lewis wrote:
> On Fri, 06 May 2011 11:32:03 -0700 Gerald Turner <gtur...@unzane.com> wrote:
>> Hello, I've seen some legitimate mails with unusual Message-Id headers
>> that cause logchecks dovecot delivery rule to be bypassed.
>>
>> Example: … sieve: msgid=<20110422T2108.GA.(stdi.s...@fsing.rootsland.net>:
>> stored mail into mailbox 'Mailing Lists/Debian/debian-devel'
>
> It's a shame no-one replied since 2011.
>
> That doesnt seem to be a valid msgid, so not sure logcheck should be
> ignoring it by default. Obviously you can edit / make your own rules
> to do so.
> So not sure there is anything for debian to do in this one. Perhaps we
> should close the bug?

Yes, please close the bug.

Apparently, thirteen years ago, I was in the spirit of opening many bugs
to try and improve logcheck, however that is an immense task, one size
*does not* fit all (such as invalid Message-Id), and I've grown
accustomed to writing many personal rules.

FWIW, I run logcheck on a dozen machines, have a large catalog of rules
applied via ansible, and I find it immensely useful for 1) discovering
daemon configuration problems, and 2) occasionally dealing with exotic
brute force attempts.  Peace of mind at the expense of adjusting rules
after a dist-upgrade every few years.

Keep up the good work =)

-- 
Gerald Turner <gtur...@unzane.com>        Encrypted mail preferred!
OpenPGP: 4096R / CA89 B27A 30FA 66C5 1B80  3858 EC94 2276 FDB8 716D

Attachment: signature.asc
Description: PGP signature

Reply via email to