[cobalt-users] Logcheck/cron question

["Andy Clyde, oxfordmusic.net" <andy.clyde@xxxxxxxxxxxxxxx>]

ok newbie question. this might be slightly off-topic but if someone could
answer/direct me to an answer i'd be grateful. i have searched web/archives
and tried almost everything i can think of but to no avail.

i'm getting these entries every 8 seconds in my log emails:
Jun 18 04:27:37 ns portsentry[1253]: attackalert: UDP scan from host:
xxx.xxx.xxx.xxx/xxx.xxx.xxx.xxx to UDP port: 68
Jun 18 04:27:37 ns portsentry[1253]: attackalert: Host:
xxx.xxx.xxx.xxx/xxx.xxx.xxx.xxx is already blocked Ignoring

the IP address is in the block owned by my co-locator. i've contacted them
and they say it's nothing to do with them (it's a bootp client apparently).
i want to rid my logs of these entries since they are swamping it. i've
tried adding various combinations to logcheck.ignore and
logcheck.violations.ignore but they're still appearing. can anyone help me?

many thanks

andy