[Bug 188754] [NEW] rules for amavisd-new are not catching all mails

[Launchpad Bug Tracker]

You have been subscribed to a public bug:

Binary package hint: logcheck-database

In gutsy, the standard amavisd-new mail output has changed a little and
logcheck doesn't seem to have filters which are up-to-date with them.

Example output:

Feb  3 18:02:34 robin amavis[19825]: (19825-06) Passed CLEAN, <logcheck at mccullagh.homeip.net> -> <logcheck at mccullagh.homeip.net>, Message-ID: <20080203180233.AA7A5206F0 at robin.homenet>, mail_id: LcudnbthwQfR, Hits: -, queued_as: DEEC8206EF, 274 ms
Feb  3 18:06:54 robin amavis[20081]: (20081-06) Passed CLEAN, LOCAL [127.0.0.1] [89.101.59.222] <logcheck at turnere.homeip.net> -> <gavin at localhost>, Message-ID: <20080203180131.239625398C at turnere>, mail_id: nXuYp2BqbYKb, Hits: -, queued_as: 4E538206F0, 665 ms
Feb  3 18:12:11 robin amavis[19825]: (19825-07) Passed CLEAN, LOCAL [127.0.0.1] [75.175.37.52] <netdev-owner at vger.kernel.org> -> <gavin at localhost>, Message-ID: <20080203100847.3022883e at extreme>, mail_id: cDwFUUTDD3Te, Hits: -, queued_as: F28B9206F0, 331 ms

This patch seems to sort it out:

--- /etc/logcheck/ignore.d.server/amavisd-new   2008-02-03 21:20:58.000000000 +0000
+++ /etc/logcheck/ignore.d.server/amavisd-new1  2008-02-03 21:20:58.000000000 +0000
@@ -1,4 +1,4 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed CLEAN,( LOCAL)?( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed (INFECTED \([-._[:alnum:]]+\)|BAD-HEADER),( \[[.:[:xdigit:]]+\]){1,2} <[^>]*> -> <[^>]*>, quarantine: (virus|badh)-[-+[:alnum:]]+, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?, mail_id: [-+[:alnum:]]+, Hits: -, queued_as: [[:xdigit:]]+, [[:digit:]]+ ms$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) NOTICE: Not sending DSN in response to bulk mail from <[^.]*> containing [[:upper:] ]+, mail intentionally dropped$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) INFO: unfolded [[:digit:]]+ illegal all-whitespace continuation lines$

** Affects: amavisd-new (Ubuntu)
     Importance: Medium
         Status: Triaged

-- 
rules for amavisd-new are not catching all mails 
https://bugs.edge.launchpad.net/bugs/188754
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to amavisd-new in ubuntu.