#699427 logcheck-database: Change in Postfix 2.9.3 log messages

#699427#5
Date:
2013-01-31 10:41:56 UTC
From:
To:
Dear Maintainer,

As written in the very last parapgraph of these release note
http://de.postfix.org/ftpmirror/official/postfix-2.9.3.RELEASE_NOTES ,
Postfix changed the way it logs failed reverse hostname lookups. This affects Wheezy,
on which I could see such a line was not filtered :
Jan 31 09:51:40 ldd postfix/smtpd[465]: warning: hostname XXX does not
resolve to address YYY: Name or service not known

Regarding the release notes and the log line I got, I filtered this
message with the line beneath. I suppose this line or something similar
should be added in /etc/logcheck/ignore.d.server/postfix:
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]:
warning: hostname [^[:space:]]+ does not resolve to address
([[:xdigit:].:]{3,39})+: Name or service not known$

And maybe the following lines are not useful anymore ?
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]:
warning: ([[:xdigit:].:]{3,39})+: address not listed for hostname
[^[:space:]]+$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]:
warning: [[:digit:].]{7,15}: hostname [^[:space:]]+ verification failed:
Name or service not known$

Regards,
Nicolas

#699427#10
Date:
2013-02-01 09:11:04 UTC
From:
To:

#699427#15
Date:
2014-10-19 13:31:48 UTC
From:
To:
I use this rule:


^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: hostname [^[:space:]]+ does not resolve to address [[:digit:].]{7,15}: Name or service not known$