logcheck 1.2.55 source package in Ubuntu

Changelog

logcheck (1.2.55) unstable; urgency=low

  * Actually install README.backports.gz to /usr/share/doc/logcheck
    (closes: #411021).

  * Make sure the logcheck group actually exists. Thanks, Jordi.

  * violations.ignore.d/logcheck-passwd:
    - ignore PAM warnings on authentication failures.

  * violations.ignore.d/logcheck-saslauthd:\
    - ignore PAM warnings on authentication failures.

  * ignore.d.server/saned:
    - ignore some more error messages.

  * ignore.d.server/hplip:
    - ignore some more error messages.

  * violations.d/logcheck:
    - elevate messages matching /violations/i.

  * violations.ignore.d/logcheck-proftpd:
    - ignore warning about attempted root logins.

  * ignore.d.server/ssh:
    - ignore @ in names of nonexistent accounts.

  * ignore.d.server/kernel:
    - ignore more initialisation messages from SCSI subsystem.

  * ignore.d.workstation/kernel:
    - ignore keyboard connection messages.

  * violations.ignore.d/logcheck-postfix:
    - ignore sender verification rejects after MAIL (in case they are not
      delayed).
    - ignore RBL rejects after successful reverse DNS resolution.
    - allow extra information after message-id.
    - ignore certificate verification failures due to invalid CA certs.
    - ignore reject due to sender address verification against virtual table.

  * ignore.d.server/postfix:
    - more policyd-weight rules by Armin Berres (closes: #410416).
    - ignore messages related to RBL DNS lookup errors.
    - ignore messages on successful delivery to Sendmail.
    - improve filters for messages relating to deferred mail.

  * ignore.d.server/spamd:
    - ignore init messages with scores in SQL (closes: #411111).

  * ignore.d.server/mldonkey-server:
    - ignore BER decode errors.

  * ignore.d.server/dovecot:
    - ignore disconnection due to IDLE.
    - ignore connection message to db by auth-worker; thanks to Guillaume
      Rischard.

  * ignore.d.server/gnu-imap4d:
    - first set of rules to ignore basic messages.

  * debconf translation updates:
    - Portuguese by Pedro Ribeiro (closes: #410734).

logcheck (1.2.54) unstable; urgency=low

  * ignore.d.server/dovecot: also ignore local logins, which are "secured",
    not "TLS". Thanks to Marco Nenciarini for the patch (closes: #407642).

  * ignore.d.workstation/kernel: ignore all kinds of input devices, not just
    Logitech mice; thanks to Dave Vehrs for the patch (closes: #407087).
  * ignore.d.server/kernel: patch by Elmar Hoffmann to filter messages by
    3ware driver (closes: #408764).

  * ignore.d.server/postfix: make anvil filter rules ipv6 compliant.
  * violations.ignore.d/logcheck-postfix: ignore deferred messages after
    rewriting the address (orig_to in use).
  * violations.ignore.d/logcheck-postfix: ignore plain informational messages
    even if they contain some of the violations.d/logcheck words.
  * ignore.d.server/postfix: ignore messages about successful deliveries to
    IMail servers (and possibly others; closes: #407777).
  * ignore.d.server/postfix: patch by Armin Berres to filter information
    messages from postfix+mysql (closes: #408444).
  * ignore.d.server/postfix: patch by Armin Berres to filter policyd-weight
    messages (closes: #408700).
  * ignore.d.server/postfix: ignore messages about numeric MX results by smtpd
    as well.
  * violations.ignore.d/logcheck-postfix: ignore lmtp message when content
    filter muted DSN.
  * ignore.d.server/postfix: ignore message due to timeout receiving the
    initial server greeting.

  * ignore.d.server/openvpn: ignore messages related to client-side routes and
    client-config-dir.
  * ignore.d.server/openvpn, violations.ignore.d/logcheck-openvpn: fix up
    a bunch of the rules for various stages of the connections.

  * ignore.d.server/ssh: ignore messages about invalid users even with <!>'"
    characters in the usernames.
  * ignore.d.server/ssh: ignore messages related to Allow/DenyUsers
    (closes: #407009).
  * violations.ignore.d/logcheck-ssh: ignore more PAM authentication failure
    messages.

  * ignore.d.server/courier, violations.ignore.d/loghceck-courier: ignore
    SSL/TLS connection errors for all components.

  * ignore.d.workstation/logcheck, ignore.d.server/cracklib: moved cracklib
    rules to server level (closes: #408557).

  * ignore.d.server/epmd: ignore information output from erlang-base daemon
    epmd; thanks Armin Berres for the patch (closes: #408559).

  * ignore.d.server/spamd: improve rules for corner cases, thanks to Armin
    Berres for his help.

  * violations.d/smartd: no longer elevate temperature messages as smartd does
    that already (closes: #407734).
  * ignore.d.server/smartd: ignore raw values in attribute change messages;
    thanks to Elmar Hoffmann (closes: #408890).
  * ignore.d.server/smartd: honour exclamation mark for max value in attribute
    change value; thanks to Elmar Hoffmann (closes: #408901).

  * ignore.d.server/squid: ignore vary store marker object mismatches.

  * Added Galician debconf translation by Jacobo Tarrio (closes: #408123).

  * Updated Czech debconf translation; thanks Miroslav Kure (closes: #407830).

logcheck (1.2.53) unstable; urgency=low

  * violations.ignore.d/logcheck-postfix: ignore entries for messages
    bounced/deferred by the LDA.
  * ignore.d.server/postfix: ignore network_biopair_interop messages about
    read errors.
  * ignore.d.server/postfix: ignore bounce messages on bad address syntax.
  * ignore.d.server/postfix: ignore lost connection warnings during HELO
    handshake.
  * ignore.d.server/postfix: more tolerance on message-ids.
  * violations.ignore.d/logcheck-postfix, ignore.d.server/postfix: ignore
    messages related to checks done by the cleanup daemon.
  * violations.ignore.d/logcheck-postfix: more extended DSN matches
    contributed by Jefferson Cowart; thanks (closes: #405786)!
  * violations.ignore.d/logcheck-postfix: fix greylisting defer message for
    zero-sized senders (<>).
  * violations.ignore.d/logcheck-postfix: fix greylisting defer filter for
    new-style messages.
  * violations.ignore.d/logcheck-postfix: ignore messages about deliverable
    messages (sender address verification).
  * violations.ignore.d/logcheck-postfix: ignore cleanup status messages which
    have been elevated to violations due to matches between domain names and
    violation filters (e.g. vrfy.org).

  * violations.ignore.d/logcheck-ssh: ignore ssh_msg_recv messages which are
    escalated to violations.

  * ignore.d.server/dcc: ignore message about sleep after failure.

  * ignore.d.server/kernel: ignore libata load message.
  * ignore.d.server/kernel: ignore several meesages related to hard disks.
  * ignore.d.{server,workstation}/kernel: ignore more messages related to
    removable disks and their filesystems.
  * ignore.d.server/kernel: ignore messages from bridge subsystem.

  * ignore.d.server/pdns: ignore message about . zone refreshes.

  * ignore.d.server/spamd: ignore logger and server pid info messages.

  * ignore.d.server/dovecot: ignore disconnection messages after login too.

  * violation.ignore.d/ssh: ignore messages about illegal users with IPs
    reverse resolved too.

  * ignore.d.server/squid: handle messages about unsupported messages with
    any type (related to mldonkey) in a hackish way, due to locale mismatches
    (see #350206).

  * violations.ignore.d/logcheck-sudo: properly ignore invocations of
    sudoedit.

  * ignore.d.server/openvpn, violations.ignore.d/logcheck-openvpn: also honour
    "openvpn" as process name, which seems to be used by clients; thanks to
    Vincent Danjean for being persistent (closes: #406179).
  * ignore.d.server/openvpn: ignore messages with IP address of peers of newly
    established connections.

  * ignore.d.server/dhclient: updated to new style for informational messages.

  * ignore.d.server/saned: also ignore access granted messages for other
    usernames.

  * logcheck now chdir()s to /var/lib/logcheck before cleanup of the temporary
    directory. This should hopefully fix some of the "Check temporary
    directory" messages.

  * Modified the system account Gecos name to "logcheck system account".

  * Check for existence of home directory of the system account. If it points
    to a non-existing directory, change it to /var/lib/logcheck. Also ignore
    the corresponding log entry by usermod.

logcheck (1.2.52) unstable; urgency=low

  * ignore.d.server/dovecot: cleanup of dovecot filters to match some more
    operational messages reported by Stefan Schlesinger (closes: #396760).
  * ignore.d.server/dovecot: ignore delivery notification log messages by
    deliver MDA.
  * ignore.d.server/dovecot: amend for new log format.
  * ignore.d.server/dovecot: ignore messages about disconnection because of
    disconnection (sic).

  * ignore.d.workstation/kernel: also ignore lack of UDF partition.

  * ignore.d.server/proftpd: small correction wrt IPv6 addresses (closes:
    #397466).
  * ignore.d.server/proftpd: ignore reaching of max login attempts limit).

  * ignore.d.server/postfix, violations.ignore.d/logcheck-postfix: ignore more
    new-style messages with extended DSNs (closes: #404422).
  * ignore.d.server/postfix: ignore cleanup msgs withempty msgid
    (closes: #400986).

  * ignore.d.server/watchdog: first couple of filters added.

  * ignore.d.server/netconsole: first couple of filters added.

  * ignore.d.server/cron-apt: ignore + in package names.

  * ignore.d.server/dhcp: fixed to filter requests for unknown leases.
  * ignore.d.server/dhcp: hide message about duplicate lease.

  * ignore.d.server/ssh: ignoring message about corrupted input MAC.
  * ignore.d.server/ssh: ignoring message about bad packet length.
  * ignore.d.server/ssh: ignoring message about bad protocol identification.
  * ignore.d.server/ssh: ignore messages about missing auth information.
  * ignore.d.server/ssh: support filtering gssapi-keyex messages; thanks to
    Russ Allbery (closes: #400426).
  * ignore.d.server/ssh: allow dashes in hostnames of refused connect
    messages; thanks to Russ Allbery (closes: #400813).
  * violations.ignore.d/logcheck-ssh: ignore ssh hosts.allow warnings
    (closes: #400714).

  * ignore.d.server/dcc: ignore message about which DCC servers are used.

  * ignore.d.server/openvpn: ignoring more operational messages.

  * ignore.d.server/snort: added ruleset by Jason Martens (closes: #403758).

  * ignore.d.server/courier: fix bogus rule, thanks to Michael Tautschnig
    (closes: #400350).

  * ignore.d.server/rsync: ignore rule about file list built; thanks to Russ
    Albery (closes: #400425).

  * ignore.d.server/lpr: ignore restart message; thanks to Russ Albery
    (closes: #400427).

  * ignore.d.server/nagios: fix filters; thanks to Esteban Cerutti
    (closes: #401717).

  * ignore.d.server/slapd: ignore slapcat init message; thanks to Dirk
    Prösdorf (closes: #400432).

  * Added Spanish debconf translation by Javier Fernández-Sanguino
    (closes: #402204).
  * Do not source debconf confmodule in preinst as it's not needed.
  * Assign a real name to the logcheck system user, unless the real name GECOS
    field is not empty (closes: #402800). Also ignore the message generated by
    chfn.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  27 Apr 2007 00:36:02 +0100