Re: [cobalt-users] Strange sendmail log

["Gerald Waugh" <gerald@xxxxxxxxx>]

"Steve Werby" <steve-lists@xxxxxxxxxxxx>  wrote
> "Gerald Waugh" <gerald@xxxxxxxxx> wrote:
> > I got the entry from logcheck. Just seemed odd, first time
> > logcheck sent me something like that.
> 
> OK, now I understand.  I think logcheck thought the records were suspicious
> because the message id contained the string "BAD" and by default that's one
> of the strings logcheck looks for.  You should be able to edit
> logcheck.violations (from memory) to remove "BAD" if you want, but there
> will be no way to prevent all false positives.  For reference, here was the
> msgid.
> 
> msgid=<NOBBIMIEMLANBADJACAIOEABCKAA.Joe@xxxxxxxx>
> 
Thanks Steve,
Really odd though, this guy must have just started posting to security-list,
I notice now that every time he post I get the entry in my logcheck output!
<shaking head>
Gerald