severity 552134 wishlist thanks Nagy Gabor Peter schrieb am Freitag, den 23. Oktober 2009:
Hi, > Package: amavisd-new > Version: 1:2.6.1.dfsg-1 > Severity: minor > Tags: patch > > I use postfix, amavisd-new, clamav, spamassassin. > > And logcheck (with default, server setting) > > Logcheck sends me a lot of reports from the logfile about amavisd-new results. > As I see in the /etc/logcheck/ignore.d.server file, an attempt was made to > filter out some of the unnecessary reports. > > However, the 'Passed CLEAN' rule does not match. And the 'WARN: address > modified' rule doesn't match either. > > Here is a sample log line that got through: > Oct 23 14:02:37 spark amavis[1199]: (01199-02) Passed CLEAN, > <[email protected]> -> <[email protected]>, Message-ID: > <[email protected]>, mail_id: Sjiu0FmRJKMZ, Hits: > -2.593, size: 2739, queued_as: 13C0923693, 3797 ms > > this changed rule seem to work for me: > ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: > \([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> -> > <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added > by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id: > [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as: > [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$ > > also please create rules to ignore 'Passed BAD-HEADER', 'Passed SPAMMY', > 'Blocked SPAM', and some others. I don't use logcheck, but I accept patches to support it :) Thanks in advance Alex -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
