Bug 492738

Summary: Problems with handling of unmatched messages from Postfix & SSHD (patch included)
Product: [Fedora] Fedora Reporter: Konstantin Coocheenin <coocheenin>
Component: logwatchAssignee: Ivana Varekova <varekova>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 8CC: varekova
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-03-30 14:14:18 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
logwatch-7.3.6-22.fc8 patch
none
Fixed sshd script (for **Unmatched Entries**) none

Description Konstantin Coocheenin 2009-03-29 02:35:31 UTC
Created attachment 337138 [details]
logwatch-7.3.6-22.fc8 patch

Description of problem:
Unmatched Entries from Postfix log

Version-Release number of selected component (if applicable):
logwatch-7.3.6-22.fc8
postfix-2.5.5-1.fc8

How reproducible:
Any

Steps to Reproduce:
1. Configure Postfix with TLS Options and run
2. Start Logwatch and see unhandled messages in output LIKE:

"1   Mar 28 21:47:47 websign postfix/smtpd[8286]: Anonymous TLS connection established from
curry.cirtexhosting.com[69.72.132.12]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)"
  
Actual results:
Large amounts of unmatched messages in output during normal Postfix work

Expected results:
All messages matches, new TLS connection status added

Additional info:
Simple patch in the unified format in attachment

Comment 1 Konstantin Coocheenin 2009-03-30 13:01:50 UTC
*********************************************************************************
And few  **Unmatched Entries** in SSHD section.

LIKE:
"reverse mapping checking getaddrinfo for ppp-89-211-166-206.dyn.sample.net [89.211.166.206] failed - POSSIBLE
BREAK-IN ATTEMPT! : 1 time(s)"

Patch are attached.

Comment 2 Konstantin Coocheenin 2009-03-30 13:05:32 UTC
Created attachment 337215 [details]
Fixed sshd script (for **Unmatched Entries**)

Comment 3 Ivana Varekova 2009-03-30 14:12:57 UTC
Thanks, fixed in logwatch-7.3.6-41.fc11.

Comment 4 Konstantin Coocheenin 2009-03-30 19:18:58 UTC
(In reply to comment #3)
> Thanks, fixed in logwatch-7.3.6-41.fc11.  

Are RPM for fc8 not maintainted? Not any fixes for for 8 version?

Comment 5 Ivana Varekova 2009-03-31 07:05:11 UTC
Hello, 
fc8 is not supported yet - so I fix f11.

Comment 6 Konstantin Coocheenin 2009-03-31 09:34:44 UTC
(In reply to comment #5)
> Hello, 
> fc8 is not supported yet - so I fix f11.  

Ok, understand. Thanks.
And where can I download this newest version?

In links (below) don`t see this version:
http://download.fedora.redhat.com/pub/fedora/linux/development/source/SRPMS/
http://download.fedora.redhat.com/pub/fedora/linux/development/x86_64/os/Packages/