package logcheck-database tags 305350 pending thanks On Tue, 2005-04-19 at 10:54 -0400, Stephen Gran wrote: > Consider: > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd\[[0-9]+\]: TLS connection > established (to|from) [^[:space:]]+: (TLSv1|SSLv[23]) with cipher > [^[:space:]]+ \([/0-9]+ bits\)$ <snip> > Could be: > ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ postfix/smtpd?\[[0-9]+\]: TLS connection > established (to|from) [^[:space:]]+: (TLSv1|SSLv[23]) with cipher > [^[:space:]]+ \([/0-9]+ bits\)$ <snip> > There are also several instances of (smtp|smtpd) that could be shortened > to smtpd? as well. Sorry to be pedantic - I was just reviewing local > logcheck rules and trying to match against yours when I noticed these > things, so I thought I'd pass it on. ISTM that it is both more > efficient and more readable.
I've modified the rules in CVS, there were some in violations.ignore.d/logcheck-postfix that I've cleaned up as well. Thanks for your bug report, -- -jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED] w: http://www.silverdream.org | p: [EMAIL PROTECTED] pgp key @ http://silverdream.org/~jps/pub.key 21:30:02 up 17 min, 2 users, load average: 2.65, 2.52, 1.58
signature.asc
Description: This is a digitally signed message part