Re: bind9 logcheck

[gerhard <ggrubbish@web.de>]

Am Mittwoch 17 August 2005 23:57 schrieb gerhard:
> Ich frage mich weshalb bind9 überhaupt installiert ist, und wie ich
> wohl Deine Vorschläge umsetzen kann.

# apt-get -s remove bind9
[...]
The following packages will be REMOVED:
  bind9 syscp

# apt-cache show syscp
[...]
Description: System Control Panel
 SysCP, the System Control Panel is a server
 administration tool which enables an internet
 service provider to give their customers a
 web-based application to administrate their
 email addresses, their suddomains etc.

Hmm...

Ich werde da mal meinen ISP konsultieren.

Wie müsste eigendlich eine logcheck Ignore regex aussehen für:
 Aug 15 18:10:17 vserverxxx named[PID]: could not listen on UDP socket: 
 permission denied
 Aug 15 18:10:17 vserverxxx named[PID]: creating IPv4 interface 
 eth0:vserverxxx failed; interface ignored

Das sind nämlich exact die Meldungen, mit denen mich logcheck wieder 
jede Stunde nervt :-(

# cat /etc/logcheck/ignore.d.server/bind
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: zone 
[._[:alnum:]-]+/IN: transferred serial [0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: NSTATS [0-9]+ 
[0-9]+$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (client 
[.#[:digit:]]+: )?received notify for zone '[._[:alnum:]-]+'$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: unexpected RCODE 
\((REFUSED|SERVFAIL)\) resolving '[^[:space:]]+': [.[:digit:]]+#[0-9]+$

was muß da noch hinzu?
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ \"creating IPv4 interface 
 eth0\:vserver[:alnum:] failed\; interface ignored\"

z.B.?

ciao

Gerhard