Package: logcheck-database Version: 1.3.3 Severity: wishlist Tags: patch I use the "discard" action in my sieve script. When this action is the one taken by dovecot's deliver binary, the message in the log file is different that when the message is stored in the Maildir or forwarded. Both those cases are caught by ignore.server.d/dovecot, but the discard case is not.
I have attached a patch against the git head to address the issue, after verifying that 1.3.3 and HEAD still suffered from it. -- Boyd Stephen Smith Jr. ,= ,-_-. =. b...@iguanasuicide.net ((_/)o o(\_)) ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-' http://iguanasuicide.net/ \_/
From c25851c2fd4dfcc9b061d4c874ca69ef9b118131 Mon Sep 17 00:00:00 2001
From: Boyd Stephen Smith Jr <b...@iguanasuicide.net>
Date: Tue, 6 Oct 2009 15:46:15 -0500
Subject: [PATCH] Ignore sieve scripts using the discard action.
---
rulefiles/linux/ignore.d.server/dovecot | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rulefiles/linux/ignore.d.server/dovecot b/rulefiles/linux/ignore.d.server/dovecot
index 77c2efe..8ad1fe2 100644
--- a/rulefiles/linux/ignore.d.server/dovecot
+++ b/rulefiles/linux/ignore.d.server/dovecot
@@ -1,5 +1,5 @@
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ (dovecot: )?(imap|pop3)-login: Disconnected \[[.:[:xdigit:]]+\]$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\): msgid=<?[^:\(]*>?( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\)?)?[[:space:]]*: (saved mail to [-_.[:alnum:]]+|(forwarded|discarded duplicate forward) to <[^[:space:]]+>)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ deliver\([...@[:alnum:]]+\): msgid=<?[^:\(]*>?( \((added by [^[:space:]]+|sfid-[_[:xdigit:]]+)\)?)?[[:space:]]*: (saved mail to [-_.[:alnum:]]+|discarded|(forwarded|discarded duplicate forward) to <[^[:space:]]+>)$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([...@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?( user=[...@[:alnum:]]+)?$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: \(pam_unix\) check pass; user unknown$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot-auth: pam_unix\(dovecot:[[:alnum:]]+\): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=([...@[:alnum:]]+)? rhost=([.:[:xdigit:]]+)?( user=[...@[:alnum:]]+)?$
--
1.6.4.2
signature.asc
Description: This is a digitally signed message part.
