Package: logcheck-database
Version: 1.2.47
Severity: normal
Tags: patch

The attached patch makes this postfix line go away:

Aug 10 18:04:46 buffy postfix/smtpd[16540]: NOQUEUE: reject: MAIL from
mail.stormhosts.net[0.0.0.0]: 504 <ddt.or.jp>: Sender address rejected:
need fully-qualified address; from=<ddt.or.jp> proto=ESMTP
helo=<AJL01.stormdns.net>

You will notice that the current violations.ignore.d/logcheck-postfix
has a line for this, but it expects to=<[^[:space:]]+> to always be
there, which it is not for some reason.

The attached patch fixes this for both cases.

Micah



-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-vserver-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages logcheck-database depends on:
ii  debconf [debconf-2.0]         1.5.3      Debian configuration management sy

logcheck-database recommends no packages.

-- debconf information:
  logcheck-database/rules-directories-note:
  logcheck-database/standard-rename-note:
  logcheck-database/conffile-cleanup: false
=== logcheck-postfix
==================================================================
--- logcheck-postfix    (revision 1168)
+++ logcheck-postfix    (local)
@@ -1,6 +1,6 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: warning: 
[.[:digit:]]+: hostname [^[:space:]]+ verification failed: (Host not found|Host 
name has no address|Name or service not known|Temporary failure in name 
resolution)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:alnum:]]+: 
reject: RCPT from [^[:space:]]+: [0-9]+ Client host rejected: cannot find your 
hostname, [^[:space:]]+; from=[^[:space:]]+ to=[^[:space:]]+ proto=(ESMTP|SMTP) 
helo=[^[:space:]]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:upper:]0-9]+: 
reject: RCPT from [^[:space:]]+: [45][0-9][0-9] <[^[:space:]]+>: 
(Sender|Recipient) address rejected: .+; from=<[^[:space:]]*> 
to=<[^[:space:]]+> proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:upper:]0-9]+: 
reject: RCPT from [^[:space:]]+: [45][0-9][0-9] <[^[:space:]]+>: 
(Sender|Recipient) address rejected: .+; from=<[^[:space:]]*> 
(to=<[^[:space:]]+>)?proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:upper:]0-9]+: 
reject: (MAIL|RCPT) from [^[:space:]]+: [45][0-9][0-9] <[^[:space:]]+>: Helo 
command rejected: .+; from=<[^[:space:]]*> to=<[^[:space:]]+> 
proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:upper:]0-9]+: 
reject: RCPT from [^[:space:]]+: [0-9]{3} <[^[:space:]]+>: Relay access denied; 
from=<[^[:space:]]*> to=<[^[:space:]]+> proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:upper:]0-9]+: 
reject: (MAIL|RCPT) from [^[:space:]]+: [45][0-9][0-9] Service unavailable; 
Sender address \[[^[:space:]]+\] blocked using [._[:alnum:]-]+;( .*;)? 
from=<[^[:space:]]*> to=<[^[:space:]]+> proto=(ESMTP|SMTP) helo=<[^[:space:]]+>$

Reply via email to