tags 302744 pending
thanks
On Sat, 02 Apr 2005, Douglas F. Calvert wrote:
> I recently blew away my old logcheck-databse and lost a number of changes
> that i had made to postfix entries. The default database for postfix reports
> the
> following errors that do not seem to be important...
>
> Apr 2 13:00:19 terminus postfix/local[29516]: 574B9B3B9F: to=<[EMAIL
> PROTECTED]>, relay=local, delay=13, status=sent (delivered to command: exec
> /usr/bin/procmail)
> Apr 2 13:00:23 terminus postfix/smtpd[29508]: C8E58B3B74:
> client=mailbox.syr.edu[128.230.18.5]
> Apr 2 13:00:06 terminus postfix/cleanup[29509]: 1D6B9B3B74:
> resent-message-id=<[EMAIL PROTECTED]>
> Apr 2 13:00:06 terminus postfix/smtpd[29515]: 574B9B3B9F:
> client=localhost[127.0.0.1]
>
thanks for your report,
you may want to test the attached rules.
i've tested those against the reported messages and added to cvs
for next release, if you have other such messages against other
packages please don't hesitate to file bug reports.
a++ maks
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: [[:alnum:]]+:
client=[._[:alnum:]-]+\[[.0-9]{7,15}\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/cleanup\[[0-9]+\]: [[:alnum:]]+:
resent-message-id=<.+>$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/local\[[0-9]+\]:
[[:upper:][:digit:]]+: to=<[^[:space:]]+>,( orig_to=<[^[:space:]]+>,)*
relay=local, delay=[0-9]+, status=sent \(delivered to command: exec
/usr/bin/procmail\)$
