-<!-- @(#) $Id: postfix_rules.xml,v 1.17 2008/04/21 17:32:11 dcid Exp $
+<!-- @(#) $Id$
- Official postfix rules for OSSEC.
- Author: Ahmet Ozturk
- Author: Daniel B. Cid
<description>Postfix insufficient disk space error.</description>
<group>service_availability,</group>
</rule>
-
+
+ <rule id="3334" level="3">
+ <if_sid>3320</if_sid>
+ <match>^daemon started </match>
+ <description>Postfix started.</description>
+ </rule>
+
+ <rule id="3333" level="7">
+ <if_sid>3320</if_sid>
+ <match>^terminating on signal</match>
+ <description>Postfix stopped.</description>
+ <group>service_availability,</group>
+ </rule>
+
<rule id="3351" level="6" frequency="$POSTFIX_FREQ" timeframe="90">
<if_matched_sid>3301</if_matched_sid>
<same_source_ip />