Merge commit 'v2.5.1'

[ossec-hids.git] / etc / rules / postfix_rules.xml

diff --git a/etc/rules/postfix_rules.xml b/etc/rules/postfix_rules.xml
index fe82aeb..1e3dc15 100755 (executable)
--- a/etc/rules/postfix_rules.xml
+++ b/etc/rules/postfix_rules.xml
@@ -1,4 +1,4 @@
-<!-- @(#) $Id: postfix_rules.xml,v 1.17 2008/04/21 17:32:11 dcid Exp $
+<!-- @(#) $Id$
   -  Official postfix rules for OSSEC.
   -  Author: Ahmet Ozturk
   -  Author: Daniel B. Cid
@@ -86,7 +86,20 @@
     <description>Postfix insufficient disk space error.</description>
     <group>service_availability,</group>
   </rule>
-            
+
+  <rule id="3334" level="3">
+    <if_sid>3320</if_sid>
+    <match>^daemon started </match>
+    <description>Postfix started.</description>
+  </rule>
+
+  <rule id="3333" level="7">
+    <if_sid>3320</if_sid>
+    <match>^terminating on signal</match>
+    <description>Postfix stopped.</description>
+    <group>service_availability,</group>
+  </rule>
+
   <rule id="3351" level="6" frequency="$POSTFIX_FREQ" timeframe="90">
     <if_matched_sid>3301</if_matched_sid>
     <same_source_ip />