[Logwatch-Devel] Fwd: logwatch 7.3.1 and amavs 2.4.2

Kirk Bauer kirk at kaybee.org
Sun Oct 15 23:14:58 MST 2006


Another one that somebody else can hopefully address better than I.

---------- Forwarded message ----------
From: Gorazd Beton <gorazd at ineta.si>
Date: Oct 4, 2006 6:54 AM
Subject: logwatch 7.3.1 and amavs 2.4.2
To: logwatch-suggestions at logwatch.org


Hi.

Logwatch installed: 7.3.1
Situtation before change: only clean passed messages are identified,
but others not

Amavis can have diffrent policy bank protocols, in 2.4.2 version this
can be LOCAL or AM.PDP or something else. Depending on setup,
amavis diffrently formats messages in log file.

Default: "Blocked SPAM, LOCAL [192.168.0.1] [01.0.0.2] from -> to"
or with AM.PDP protocol: "Blocked SPAM, AM.PDP [192.168.0.1]
[01.0.0.2] from -> to"
All other messages (infected, malware, etc) are formated in same way.

If I replace all strings "LOCAL" with "AM.PDP" in
/usr/share/logwatch/scripts/services/amavis, logwatch can identify all
messages by
amavis.

One solution would be to expand perl regular expresions in
/usr/share/logwatch/scripts/services/amavis (perl is not my language
:))
or to have setting for amavis protocol type in
/usr/share/logwatch/default.conf/services/amavis.conf file.

Just litle suggestion, if it is usefull for others.

Best regards.



-- 
Kirk Bauer <kirk at kaybee.org>
http://linux.kaybee.org | www.autorpm.org | www.logwatch.org


More information about the Logwatch-Devel mailing list