Package: logcheck
Version: 1.3.23
Severity: wishlist
Tags: patch
Dear Maintainer,
Installing opensmtpd on a clean system, logcheck (level ignore.d.server)
reports too many events coming from opensmtpd.
This happened since opensmtpd changed the format of its logs.
These are a proposal for escluding lines that are not harmful:
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ smtpd\[[[:digit:]]+\]:
[[:xdigit:]]{16} mta (connecting|connected|disconnected|tls ciphers=).*$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ smtpd\[[[:digit:]]+\]:
[[:xdigit:]]{16} mta server-cert-check result="success"$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ smtpd\[[[:digit:]]+\]:
[[:xdigit:]]{16} mta delivery .* result="Ok" .*$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ smtpd\[[[:digit:]]+\]:
[[:xdigit:]]{16} smtp (connected|disconnected|envelope|message) .*$
Regards,
larzeni
-- System Information:
Debian Release: 11.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-9-amd64 (SMP w/16 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages logcheck depends on:
ii adduser 3.118
ii cron [cron-daemon] 3.0pl1-137
ii lockfile-progs 0.1.18
ii logtail 1.3.23
ii mime-construct 1.11+nmu3
ii opensmtpd [mail-transport-agent] 6.8.0p2-3
ii rsyslog [system-log-daemon] 8.2102.0-2
Versions of packages logcheck recommends:
ii logcheck-database 1.3.23
Versions of packages logcheck suggests:
pn syslog-summary <none>
-- no debconf information
