X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?p=ossec-hids.git;a=blobdiff_plain;f=debian%2Fossec-hids%2Fvar%2Fossec%2Frules%2Flog-entries%2Fmail-errors;fp=debian%2Fossec-hids%2Fvar%2Fossec%2Frules%2Flog-entries%2Fmail-errors;h=c9d888de5f55504785c57d02b04eaa340603e012;hp=0000000000000000000000000000000000000000;hb=3f728675941dc69d4e544d3a880a56240a6e394a;hpb=927951d1c1ad45ba9e7325f07d996154a91c911b

diff --git a/debian/ossec-hids/var/ossec/rules/log-entries/mail-errors b/debian/ossec-hids/var/ossec/rules/log-entries/mail-errors
new file mode 100644
index 0000000..c9d888d
--- /dev/null
+++ b/debian/ossec-hids/var/ossec/rules/log-entries/mail-errors
@@ -0,0 +1,32 @@
+pop3d: authentication error: Input/output error
+pop3d: authentication error: Input/output error
+postfix/postfix-script: fatal: the Postfix mail system is not running
+postfix/postfix-script: fatal: the Postfix mail system is not running
+
+OSSEC HIDS Notification.
+2006 May 25 03:50:36
+
+Received From: /var/log/maillog
+Rule: 102 fired (level 7) -> "Unknown problem somewhere in the system.'"
+Portion of the log(s):
+
+ postfix/smtp[8909]: 774C14AEF2: to=<rj-bounces@spacedelic.com.br>, relay=127.0.0.1[127.0.0.1], delay=423, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 Local Error (in reply to end of DATA command))
+
+
+
+  --END OF NOTIFICATION
+
+
+OSSEC HIDS Notification.
+2006 May 25 03:32:34
+
+Received From: /var/log/maillog
+Rule: 102 fired (level 7) -> "Unknown problem somewhere in the system.'"
+Portion of the log(s):
+
+scorpion postfix/smtp[9144]: connect to rmailb2.walla.co.il[192.118.82.145]: Connection refused (port 25)
+
+
+
+ --END OF NOTIFICATION
+