logcheck ignore and violation rules are not matching on alternate policy banks

What I would suggest is to replace this ignore rules (and all other similar) :

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed CLEAN,( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$

with :

^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ amavis\[[[:digit:]]+\]: \([-[:digit:]]+\) Passed CLEAN,( [-[:alnum:]]+)?( LOCAL)?( \[[.:[:xdigit:]]+\]){0,2} <[^>]*> -> <[^>]*>(,<[^>]*>)*, Message-ID: <[^>]+>( \((added by[^)]+|sfid-[_[:xdigit:]]+)\))?,( Resent-Message-ID: <[^>]+>,)? mail_id: [-+[:alnum:]]+, Hits: (-[.[:digit:]]*)+, size: [[:xdigit:]]+, queued_as: [[:xdigit:]]+( OK id=[-[:alnum:]]+)?, [[:digit:]]+ ms$

@Simon, thanks for the bug report. Please could you expand on the impact of this bug, what issues it causes?

Thanks.

@Dave

I just noticed that my diff in comment #1 does not match all cases as it does not catch IPv6 addresses.

There are more problems than simply the policy bank name appearing in the logs. Here are all the cases that make logcheck report noise (fail to silence the log messages as they no longer match the ignore rules) :

* properly configured trusted/internal networks in spamassassin: this is responsible for the "LOCAL" string in the logs
* alternate policy banks in amavis : this is responsible for the "DKIM" in m example but that can be any string
* IPv6 delivery : add the "IPv6:" prefix in front of the addresses

I agree with you that the importance is low as this simply implies more noise in logcheck reports. I'd like to see this fixed though so I've attached 2 diffs that should take care of all the above.

The attachment "logcheck ignore.d.server diff" of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-sponsors please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

[Expired for amavisd-new (Ubuntu) because there has been no activity for 60 days.]

Setting back to "New" as I think that my comment #3 addresses the request of Dave in comment #2.