Package: logcheck

I'm running dnsmasq-2.52 on a Gentoo Linux server, and the default rules
for dnsmasq needed a few minor updates.

See attached patch for suggested changes.

Here are the relevant log lines:

Jan  1 12:07:11 hq dnsmasq-dhcp[4093]: DHCPNAK(eth0) 192.168.20.107
00:26:37:a0:75:57 wrong server-ID
Jan  1 12:28:39 hq dnsmasq-dhcp[4093]: DHCPNAK(eth0) 192.168.20.107
00:26:37:a0:75:57 wrong server-ID
Jan  1 12:39:09 hq dnsmasq-dhcp[4093]: DHCPNAK(eth0) 192.168.20.107
00:26:37:a0:75:57 wrong server-ID

Jan  1 15:27:36 hq dnsmasq-dhcp[4093]: Ignoring domain sternik.org.pl
for DHCP host name (null)
Jan  1 15:57:00 hq dnsmasq-dhcp[4093]: Ignoring domain sternik.org.pl
for DHCP host name (null)
Jan  1 17:02:13 hq dnsmasq-dhcp[4093]: Ignoring domain sternik.org.pl
for DHCP host name (null)
From 43f8a1788ad0ea389f2dd8ea8715d5d3ceb04f30 Mon Sep 17 00:00:00 2001
From: Pawel Hajdan, Jr <phajdan...@gmail.com>
Date: Sat, 1 Jan 2011 17:33:41 +0100
Subject: [PATCH] More complete rules for dnsmasq.

---
 rulefiles/linux/ignore.d.server/dnsmasq |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/rulefiles/linux/ignore.d.server/dnsmasq 
b/rulefiles/linux/ignore.d.server/dnsmasq
index 6c87bbc..51e2c1f 100644
--- a/rulefiles/linux/ignore.d.server/dnsmasq
+++ b/rulefiles/linux/ignore.d.server/dnsmasq
@@ -1,5 +1,6 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: read /etc/hosts - 
[[:digit:]]+ addresses$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: reading 
(/var/run/dnsmasq/|/etc/)resolv.conf$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: using nameserver 
[.[:digit:]#]+$
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq(-dhcp)?\[[[:digit:]]+\]: 
(DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPRELEASE|DHCPINFORM|BOOTP)\([[:alnum:]]+\)
 [ :[:alnum:]._-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq(-dhcp)?\[[[:digit:]]+\]: 
(DHCPDISCOVER|DHCPOFFER|DHCPREQUEST|DHCPACK|DHCPNAK|DHCPRELEASE|DHCPINFORM|BOOTP)\([[:alnum:]]+\)
 [ :[:alnum:]._-]+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq(-dhcp)?\[[[:digit:]]+\]: Ignoring 
domain [._[:alnum:]-]+ for DHCP host name \([._[:alnum:]-]+\)$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ dnsmasq\[[[:digit:]]+\]: ignoring 
nameserver 127\.0\.0\.1 - local interface$
-- 
1.7.3.4

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to