Error in parsing some postfix TLS log messages
alarig <[email protected]> Wed, 29 Apr 2015 09:12:10 +0200
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi,
I think that logwatch is looking for the word “Untrusted” in the
outgoing emails over TLS, because the anonymous connections are in the
“**Unmatched Entries**“ category.
I use the version 7.4.0_p170-r1 from the gentoo repos.
For exemple, I have this in my daily report:
4 TLS connections (client) ----------------------------------------------------------------
2 Untrusted: TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)
2 mx00.1and1.fr[212.227.15.41]:25
2 Untrusted: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
1 mail.securmail.fr[212.83.160.113]:25
1 mx.lists.ffdn.org[80.67.169.19]:25
**Unmatched Entries**
1 Apr 28 23:02:05 bulbizarre postfix/smtp[32146]: Anonymous TLS connection established to redisdead.crans.org[2a01:240:fe3d:4:200:9ff:fe04:1901]:25: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)
Do you have the same issue?
--
alarig
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel
signature.asc
(application/pgp-signature, 490 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJVQIRKAAoJEK84SsFrICuISsQH/RLCEj1Mp1gyPyMjEXfAk16D 97QzguMLTw4x9jm2SCngqppTKXoC1oY4r5YjZYdPdpLPwdzKbtCef5OIMRgyk/KL hDils7dmD9NUzOjPuwJxB0nZaGlS5YI/QK3l8Z/TaGkvgsajHWR0BDjziXzgSJf7 UhCV3pd0w9dtkL4WZvuixG6i1B7M8/JpzYhnbOy+S3pRxhj80GbRFs86GPVej8YM nApHao2HjIm+wNPJhlmf4ajUgZpImrqms/bUFB48kDFWQvSQ3oklmL1DgeENF9Ui k2fIe98Ya8WceHnRqV6qliNin/s9UZL5wR8egPvIKqh1oBUJ3G4gH2K6Z7GnYeU= =/iYP -----END PGP SIGNATURE-----