logcheck (1.2.45) unstable; urgency=low
[ Todd Troxell ]
* Increment version
[ Jamie Penman-Smithson ]
* ignore.d.server/smartd: Add rule to match normal temperature changes.
* violations.ignore.d/logcheck-sudo: Ignore invocation of sudoedit too.
Thanks to Jan Braun <email address hidden>. (Closes: #360120)
* ignore.d.server/dhcp: Match new DHCP log format with IPv6 addresses.
(Closes: #369603)
* violations.ignore.d/logcheck-ssh: Match new log format in openssh
4.3. (Closes: #369497)
* ignore.d.server/oidentd: Match IPv6 addresses too. Thanks to
Elmar Hoffmann <email address hidden> for the patch. (Closes: #369294)
* ignore.d.server/oidentd: Remove superfluous rule for connections from
localhost.
* ignore.d.server/pdns: Ignore 'Refreshed n records' messages.
(Closes: #369263)
* ignore.d.server/smartd: Minor change to rule for "Temperature changed"
messages.
* ignore.d.server/xinetd: Add the first rules for xinetd.
* ignore.d.server/smartd: Merge two rules for self-test messages into one.
(Closes: #368878)
* ignore.d.server/saslauthd: Add rule to suppress 'client step' messages.
(Closes: #368652)
* violations.ignore.d/logcheck-postfix: Update rules for postgrey.
(Closes: #368318)
* violations.ignore.d/logcheck-postfix: Add rule to suppress smtpd '554
Access denied' messages. (Closes: #368313)
* ignore.d.server/postfix: Fix rule to really match 'read timeout' messages.
(Closes: #367781)
* ignore.d.server/spamd: Merge in rules from the spamassassin package.
(Closes: #366364)
* Minor changes to usage summary and explanation of FQDN option.
(Closes: #365565)
* ignore.d.server/dkfilter: Minor fix to rules for dkfilter.out.
Match 'wrong sender domain' messages from dkfilter.out.
* ignore.d.workstation/anacron: Move to ignore.d.server. (Closes: #368900)
[ maximilian attems ]
* ignore.d.server/dovecot: Add rule for aborted logins.
* ignore.d.workstation/kdm: Ignore kdm-greeter logline.
* ignore.d.server/nagios: Improve existing rules, add newer for service
flapping and ping logging.
* ignore.d.server/sympa: Add impressive ruleset on common ml operations.
* ignore.d.server/stunnel: New rules.
* ignore.d.server/squid: Add 2 rules for cachemgr.
* ignore.d.server/rsync: Add 2 rules for common rsyncd failures.
* ignore.d.server/rsnapshot: Add 2 rules for casual rsnapshort warnings.
* ignore.d.server/proftpd: Add 3 rules about usual ftpd operations.
* ignore.d.server/ntp: Ignore to many recvbufs.
Thanks to all the above rules to Peter Palfrader <email address hidden>.
* ignore.d.workstation/kernel: Add rules to reduce noise on swsusp.
* debian/logcheck.postinst: Remove old check against woody version
removing /var/cache/logcheck.
* debian/logcheck-database.preinst, debian/logcheck-database.postinst:
Remove checks against old woody symlinkfarm.
* debian/logtail.preinst: Remove old dpkg-divert handling.
* debian/control: Remove useless versioned depends on debianutils and
po-debconf. Versions are satisfied on Sarge.
* debian/control: Conform to policy 3.7.2 without changes.
* ignore.d.server/dhcp: Properly escape dots.
[ Gerfried Fuchs ]
* debian/control: move debhelper dependency to Build-Depends due to policy
requirements.
[ martin f. krafft ]
* ignore.d.server/cron: added rules to ignore begin/end of crontab
edits (closes: #356681).
* ignore.d.server/cron: added crontab-specific lines from
ignore.d.workstation/cron (and removed them there).
* ignore.d.*/cron-apt: moved cron-apt rules from workstation to server.
* ignore.d.server/dhclient: even 3.0 sleeps when no lease in persistent
database.
* ignore.d.workstation/dovecot: Added/updated dovecot 1.0 rules.
* ignore.d.server/kernel: added rules to ignore martian, ll header, and
icmpv6_send warnings.
* ignore.d.server/pdns: added many rules for standard pdns operational
messages.
* violations.ignore.d/logcheck-pdns: ignore denied AXFR requests.
* ignore.d.server/postfix: ignoring cleanup header_checks REPLACE messages
(closes: #376489).
* ignore.d.server/postfix: extending rule for "too many errors" to cover all
SMTP commands (closes: #376472).
* ignore.d.server/postfix: ignoring dNSNames complaints (closes: #376469,
and parts of 369487).
* ignore.d.server/postfix: ignoring bounce message about sender non-delivery
notification.
* violations.ignore.d/logcheck-postfix: ignore invalid SASL logins, PAM
will complain with more details (closes: #369487).
* violations.ignore.d/logcheck-postfix: ignore HELO access check rejections
(closes: #376968).
* ignore.d.[ws]*/ppp: adding/updating rules to ignore informational
messages.
* ignore.d.server/proftpd: adding ANON command to successful login rule and
noticing that the other rule of the bug has already been fixed
(closes: #372541).
* ignore.d.server/proftpd: ignoring logins with unknown users.
* ignore.d.workstation/proftpd: ignore reaching maximum number of login
attempts.
* ignore.d.server/smartd: don't be so selective about temperature filtering
(closes: #355085).
* ignore.d.server/smartd, violations.ignore.d/logcheck-smartd: ignore usage
and prefailure attribute changes given that smartd will send separate mail
when things go bad anyway.
* ignore.d.server/spamd: fixing several of the spamd rules wrt email
addresses, and added new rules for newer spamd versions.
* ignore.d.[ws]*/squid: moved messages about server stop/start/reconfigure
to workstation, and those about unchanged cache dir sizes to server.
* ignore.d.*/squid: folded in some filters for operational messages and
updated squidGuard spawn message to include all eventHelper messages.
* ignore.d.server/ssh: ignore messages about missing shadow information
for NOUSER (when there was a NULL user passed in the SSH protocol).
* ignore.d.server/ssh: make sure that we never get bothered by scans again
(closes: #376461, #354820, #376474).
* ignore.d.server/ssh: ignore SSH disconnects (closes: #376464).
* ignore.d.server/ssh, violations.ignore.d/logcheck-ssh: ignore login
attempts for nonexistent accounts (closes: #376462).
* src/logcheck: if called as root, now echoes the options back to the user
for easier cut-n-paste.
* debian/control: recommend logcheck-database instead of depending on it
(closes: #376739).
logcheck (1.2.44) unstable; urgency=low
[ Jamie Penman-Smithson ]
* Add kernel rules for 'Device not ready' and 'BIOS EDD' messages.
(Closes: #353510)
* Update postfix rules to match new log format in 2.2.
* Modify exim4 rules to match messages with multiple recipients.
(Closes: #359878)
[ maximilian attems ]
* debian/logcheck.postrm, debian/logcheck.postinst: Don't hide errors
in postinst.
* src/logcheck: $SENDMAILTO escape it properly so that multiple senders
can be specified.
* src/logcheck: Make shure we always have an $LOCKFILEDIR as Ubuntu
purges lock dir on startup. Thanks Dave Love <email address hidden> for the patch.
(closes: #357039)
* debian/logcheck.postinst: 755 is fine as permissions for $LOCKFILEDIR.
* ignore.d.server/ntp: Catch negative corrections too - thanks to
Robert Edmonds <email address hidden>. (closes: #355649)
* ignore.d.server/smartd: Ignore smartd temperature messages within
the normal operating range between 5-50 degrees C - thanks to
Adam Porter <email address hidden> for the patch. (closes: #355085)
* it.po: Add Italian debconf translation. Thanks to Luca Monducci
<email address hidden>. (closes: #356737)
* ignore.d.server/postfix: Ignore noise buffer length postfix logline -
thanks to Karl Chen for the patch. (closes: #356754)
* ignore.d.server/kernel: Ignore ECP dmesg logline. (closes: #355092)
* ignore.d.server/dhclient: Fix typo, add rule match.
* ignore.d.server/popa3d: Take into account multiple messages.
Thanks Robbert Kouprie <email address hidden> for the patch.
(closes: #363336)
* ignore.d.workstation/kernel: Add various kernel rules. (Closes: #353815)
[ Todd Troxell ]
* Switch back to using run-parts as it created confusion for users with
files like #rulefile# and .rulefile.swp in their tree. (closes: #353793)
logcheck (1.2.43a) unstable; urgency=low
* Bugfix release. Unconditionalize chgrp -R of /etc/logceck as our
new logfile-unreadability tests revealed some unreadable rule files
upon upgrade.
* This release also includes changes I forgot to include in the previous
release, listed in the prior changelog entry.
logcheck (1.2.43) unstable; urgency=low
[ maximilian attems ]
* Add exim4 rule for defered messages.
* Fix ssh rule for valid session.
* Add some kernel rules for some sony device.
[ Todd Troxell ]
* Correct hylafax receive rule.
* Add /var/lib/logcheck to INSTALL, Thanks to Jonathan Adamczewski
<email address hidden>
* Add check to see if logcheck cfg is accessible. Thanks Markus Peuhkuri
<email address hidden> (Closes: #344553)
* Add Marcus Peuhkuri's ssh-summarizer script to doc dir (Closes: #307585)
* Correct Postfix rule for "address not listed for hostname"
(Closes: #344620)
* Update copyright year to 2006
* Add Dutch Debconf translation, thanks Frans Pop <email address hidden>
(Closes: #344716)
* Patch from Bill Wohler <email address hidden> to sudo vc ignore rules
(Closes: #343631)
* Remove redundant hylafax mdoem string rule
* Add exit status section to manpage
[ Jamie Penman-Smithson ]
* Add snmpd rule to match new "Connection from UDP" messages. Thanks to
Ralf Hildebrandt <email address hidden>. (Closes: #337916)
* Update dovecot rule to match new log format - lowercase method - yet
again. (Closes: #337517)
* Add various new kernel rules at workstation level. Thanks to Dave Vehrs
<email address hidden>. (Closes: #337998)
* Fix postfix rules to match "initializing server-side TLS engine"
messages. (Closes: #347227)
* Update su rules for login 4.0.x. (Closes: #346502)
* Reword EXAMPLES section in the logcheck manpage. Thanks to
Jari Aalto <email address hidden>. (Closes: #351669)
* Update postfix/lmtp rule to match new log format in postfix 2.3.
* Use 'find' instead of 'run-parts' to list the contents of
directories since 'run-parts' cannot handle filenames with periods.
Update control to depend on findutils.
* Exit with an error if a rule file is unreadable. (Closes: #340226)
* Add postfix rule to match "statistics: max simultaneous domains[..]"
scache messages.
* Update spamd rules. Thanks to Russ Allbery <email address hidden> &
Karl Chen <email address hidden>. (Closes: #336558)
* Fix ntp rules to match ipv6 addresses too. Thanks to Beat Bolli
<email address hidden>. (Closes: #336079)
* Add first rule for cvs-pserver. (Closes: #338732)
* Modify dhcp rules to match dhcpd output when no client hostname is
returned and '(none)' is used. (Closes: #346350)
* Add the first rules for cron-apt. Thanks to Dave Vehrs <email address hidden>.
(Closes: #338003)
* Add logcheck to /etc/aliases during install. (Closes: #353148)
* Add the first rules for dspam.
-- Martin Pitt <email address hidden> Mon, 10 Jul 2006 10:33:54 +0100
