logcheck 1.2.45 source package in Ubuntu

Changelog

logcheck (1.2.45) unstable; urgency=low

  [ Todd Troxell ]
  * Increment version

  [ Jamie Penman-Smithson ]
  * ignore.d.server/smartd: Add rule to match normal temperature changes.
  * violations.ignore.d/logcheck-sudo: Ignore invocation of sudoedit too.
    Thanks to Jan Braun <email address hidden>. (Closes: #360120)
  * ignore.d.server/dhcp: Match new DHCP log format with IPv6 addresses.
    (Closes: #369603)
  * violations.ignore.d/logcheck-ssh: Match new log format in openssh
    4.3. (Closes: #369497)
  * ignore.d.server/oidentd: Match IPv6 addresses too. Thanks to
    Elmar Hoffmann <email address hidden> for the patch. (Closes: #369294)
  * ignore.d.server/oidentd: Remove superfluous rule for connections from
    localhost.
  * ignore.d.server/pdns: Ignore 'Refreshed n records' messages.
    (Closes: #369263)
  * ignore.d.server/smartd: Minor change to rule for "Temperature changed"
    messages.
  * ignore.d.server/xinetd: Add the first rules for xinetd.
  * ignore.d.server/smartd: Merge two rules for self-test messages into one.
    (Closes: #368878)
  * ignore.d.server/saslauthd: Add rule to suppress 'client step' messages.
    (Closes: #368652)
  * violations.ignore.d/logcheck-postfix: Update rules for postgrey.
    (Closes: #368318)
  * violations.ignore.d/logcheck-postfix: Add rule to suppress smtpd '554
    Access denied' messages. (Closes: #368313)
  * ignore.d.server/postfix: Fix rule to really match 'read timeout' messages.
    (Closes: #367781)
  * ignore.d.server/spamd: Merge in rules from the spamassassin package.
    (Closes: #366364)
  * Minor changes to usage summary and explanation of FQDN option.
    (Closes: #365565)
  * ignore.d.server/dkfilter: Minor fix to rules for dkfilter.out.
    Match 'wrong sender domain' messages from dkfilter.out.
  * ignore.d.workstation/anacron: Move to ignore.d.server. (Closes: #368900)

  [ maximilian attems ]
  * ignore.d.server/dovecot: Add rule for aborted logins.
  * ignore.d.workstation/kdm: Ignore kdm-greeter logline.
  * ignore.d.server/nagios: Improve existing rules, add newer for service
    flapping and ping logging.
  * ignore.d.server/sympa: Add impressive ruleset on common ml operations.
  * ignore.d.server/stunnel: New rules.
  * ignore.d.server/squid: Add 2 rules for cachemgr.
  * ignore.d.server/rsync: Add 2 rules for common rsyncd failures.
  * ignore.d.server/rsnapshot: Add 2 rules for casual rsnapshort warnings.
  * ignore.d.server/proftpd: Add 3 rules about usual ftpd operations.
  * ignore.d.server/ntp: Ignore to many recvbufs.
    Thanks to all the above rules to Peter Palfrader <email address hidden>.
  * ignore.d.workstation/kernel: Add rules to reduce noise on swsusp.
  * debian/logcheck.postinst: Remove old check against woody version
    removing /var/cache/logcheck.
  * debian/logcheck-database.preinst, debian/logcheck-database.postinst:
    Remove checks against old woody symlinkfarm.
  * debian/logtail.preinst: Remove old dpkg-divert handling.
  * debian/control: Remove useless versioned depends on debianutils and
    po-debconf. Versions are satisfied on Sarge.
  * debian/control: Conform to policy 3.7.2 without changes.
  * ignore.d.server/dhcp: Properly escape dots.

  [ Gerfried Fuchs ]
  * debian/control: move debhelper dependency to Build-Depends due to policy
    requirements.

  [ martin f. krafft ]
  * ignore.d.server/cron: added rules to ignore begin/end of crontab
    edits (closes: #356681).
  * ignore.d.server/cron: added crontab-specific lines from
    ignore.d.workstation/cron (and removed them there).
  * ignore.d.*/cron-apt: moved cron-apt rules from workstation to server.
  * ignore.d.server/dhclient: even 3.0 sleeps when no lease in persistent
    database.
  * ignore.d.workstation/dovecot: Added/updated dovecot 1.0 rules.
  * ignore.d.server/kernel: added rules to ignore martian, ll header, and
    icmpv6_send warnings.
  * ignore.d.server/pdns: added many rules for standard pdns operational
    messages.
  * violations.ignore.d/logcheck-pdns: ignore denied AXFR requests.
  * ignore.d.server/postfix: ignoring cleanup header_checks REPLACE messages
    (closes: #376489).
  * ignore.d.server/postfix: extending rule for "too many errors" to cover all
    SMTP commands (closes: #376472).
  * ignore.d.server/postfix: ignoring dNSNames complaints (closes: #376469,
    and parts of 369487).
  * ignore.d.server/postfix: ignoring bounce message about sender non-delivery
    notification.
  * violations.ignore.d/logcheck-postfix: ignore invalid SASL logins, PAM
    will complain with more details (closes: #369487).
  * violations.ignore.d/logcheck-postfix: ignore HELO access check rejections
    (closes: #376968).
  * ignore.d.[ws]*/ppp: adding/updating rules to ignore informational
    messages.
  * ignore.d.server/proftpd: adding ANON command to successful login rule and
    noticing that the other rule of the bug has already been fixed
    (closes: #372541).
  * ignore.d.server/proftpd: ignoring logins with unknown users.
  * ignore.d.workstation/proftpd: ignore reaching maximum number of login
    attempts.
  * ignore.d.server/smartd: don't be so selective about temperature filtering
    (closes: #355085).
  * ignore.d.server/smartd, violations.ignore.d/logcheck-smartd: ignore usage
    and prefailure attribute changes given that smartd will send separate mail
    when things go bad anyway.
  * ignore.d.server/spamd: fixing several of the spamd rules wrt email
    addresses, and added new rules for newer spamd versions.
  * ignore.d.[ws]*/squid: moved messages about server stop/start/reconfigure
    to workstation, and those about unchanged cache dir sizes to server.
  * ignore.d.*/squid: folded in some filters for operational messages and
    updated squidGuard spawn message to include all eventHelper messages.
  * ignore.d.server/ssh: ignore messages about missing shadow information
    for NOUSER (when there was a NULL user passed in the SSH protocol).
  * ignore.d.server/ssh: make sure that we never get bothered by scans again
    (closes: #376461, #354820, #376474).
  * ignore.d.server/ssh: ignore SSH disconnects (closes: #376464).
  * ignore.d.server/ssh, violations.ignore.d/logcheck-ssh: ignore login
    attempts for nonexistent accounts (closes: #376462).
  * src/logcheck: if called as root, now echoes the options back to the user
    for easier cut-n-paste.
  * debian/control: recommend logcheck-database instead of depending on it
    (closes: #376739).

logcheck (1.2.44) unstable; urgency=low

  [ Jamie Penman-Smithson ]
  * Add kernel rules for 'Device not ready' and 'BIOS EDD' messages.
    (Closes: #353510)
  * Update postfix rules to match new log format in 2.2.
  * Modify exim4 rules to match messages with multiple recipients.
    (Closes: #359878)

  [ maximilian attems ]
  * debian/logcheck.postrm, debian/logcheck.postinst: Don't hide errors
    in postinst.
  * src/logcheck: $SENDMAILTO escape it properly so that multiple senders
    can be specified.
  * src/logcheck: Make shure we always have an $LOCKFILEDIR as Ubuntu
    purges lock dir on startup. Thanks Dave Love <email address hidden> for the patch.
    (closes: #357039)
  * debian/logcheck.postinst: 755 is fine as permissions for $LOCKFILEDIR.
  * ignore.d.server/ntp: Catch negative corrections too - thanks to
    Robert Edmonds <email address hidden>. (closes: #355649)
  * ignore.d.server/smartd: Ignore smartd temperature messages within
    the normal operating range between 5-50 degrees C - thanks to
    Adam Porter <email address hidden> for the patch. (closes: #355085)
  * it.po: Add Italian debconf translation. Thanks to Luca Monducci
    <email address hidden>. (closes: #356737)
  * ignore.d.server/postfix: Ignore noise buffer length postfix logline -
    thanks to Karl Chen for the patch. (closes: #356754)
  * ignore.d.server/kernel: Ignore ECP dmesg logline. (closes: #355092)
  * ignore.d.server/dhclient: Fix typo, add rule match.
  * ignore.d.server/popa3d: Take into account multiple messages.
    Thanks Robbert Kouprie <email address hidden> for the patch.
    (closes: #363336)
  * ignore.d.workstation/kernel: Add various kernel rules. (Closes: #353815)

  [ Todd Troxell ]
  * Switch back to using run-parts as it created confusion for users with
    files like #rulefile# and .rulefile.swp in their tree. (closes: #353793)

logcheck (1.2.43a) unstable; urgency=low

  * Bugfix release.  Unconditionalize chgrp -R of /etc/logceck as our
    new logfile-unreadability tests revealed some unreadable rule files
    upon upgrade.
  * This release also includes changes I forgot to include in the previous
    release, listed in the prior changelog entry.

logcheck (1.2.43) unstable; urgency=low

  [ maximilian attems ]
  * Add exim4 rule for defered messages.
  * Fix ssh rule for valid session.
  * Add some kernel rules for some sony device.

  [ Todd Troxell ]
  * Correct hylafax receive rule.
  * Add /var/lib/logcheck to INSTALL, Thanks to Jonathan Adamczewski
    <email address hidden>
  * Add check to see if logcheck cfg is accessible.  Thanks Markus Peuhkuri
    <email address hidden> (Closes: #344553)
  * Add Marcus Peuhkuri's ssh-summarizer script to doc dir (Closes: #307585)
  * Correct Postfix rule for "address not listed for hostname"
    (Closes: #344620)
  * Update copyright year to 2006
  * Add Dutch Debconf translation, thanks Frans Pop <email address hidden>
    (Closes: #344716)
  * Patch from Bill Wohler <email address hidden> to sudo vc ignore rules
    (Closes: #343631)
  * Remove redundant hylafax mdoem string rule
  * Add exit status section to manpage

  [ Jamie Penman-Smithson ]
  * Add snmpd rule to match new "Connection from UDP" messages. Thanks to
    Ralf Hildebrandt <email address hidden>. (Closes: #337916)
  * Update dovecot rule to match new log format - lowercase method - yet
    again. (Closes: #337517)
  * Add various new kernel rules at workstation level. Thanks to Dave Vehrs
    <email address hidden>. (Closes: #337998)
  * Fix postfix rules to match "initializing server-side TLS engine"
    messages. (Closes: #347227)
  * Update su rules for login 4.0.x. (Closes: #346502)
  * Reword EXAMPLES section in the logcheck manpage. Thanks to
    Jari Aalto <email address hidden>. (Closes: #351669)
  * Update postfix/lmtp rule to match new log format in postfix 2.3.
  * Use 'find' instead of 'run-parts' to list the contents of
    directories since 'run-parts' cannot handle filenames with periods.
    Update control to depend on findutils.
  * Exit with an error if a rule file is unreadable. (Closes: #340226)
  * Add postfix rule to match "statistics: max simultaneous domains[..]"
    scache messages.
  * Update spamd rules. Thanks to Russ Allbery <email address hidden> &
    Karl Chen <email address hidden>. (Closes: #336558)
  * Fix ntp rules to match ipv6 addresses too. Thanks to Beat Bolli
    <email address hidden>. (Closes: #336079)
  * Add first rule for cvs-pserver. (Closes: #338732)
  * Modify dhcp rules to match dhcpd output when no client hostname is
    returned and '(none)' is used. (Closes: #346350)
  * Add the first rules for cron-apt. Thanks to Dave Vehrs <email address hidden>.
    (Closes: #338003)
  * Add logcheck to /etc/aliases during install. (Closes: #353148)
  * Add the first rules for dspam.

 -- Martin Pitt <email address hidden>   Mon,  10 Jul 2006 10:33:54 +0100