[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-developers] Logcheck question
- Subject: [cobalt-developers] Logcheck question
- From: email-sub@xxxxxxxxxx
- Date: Mon Dec 17 17:58:38 2001
- List-id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com>
OK I have a question for those of you who are more in the know with these
things
I have fine tuned my logcheck.ignore but I keep getting similar enties to:
===============
Dec 17 16:33:03 raq4-01 named[1511]: bad referral (127.167.216.in-addr.arpa
!< 156.127.167.216.in-addr.arpa) from [207.153.206.126].53
Dec 17 16:30:06 raq4-01 sendmail[24187]: NOQUEUE: localhost [127.0.0.1] did
not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
===============
Both in violations and in unusual events.
Can I place these both in the ignore file? Currently I just have the line:
named*:Lame server on
Are these things that are trivial and should be ignored, or should I be
watching these events?
I would also like to compare notes on logcheck.ignore files off of
list. (I dont want to spam the list with my files.
-Thomas Sanders