[Mimedefang] MIMEDefang 2.72 is Released - md_syslog problem

Kevin A. McGrail KMcGrail at PCCC.com
Mon Sep 5 12:40:59 EDT 2011


>> The change to md_syslog has broken graphdefang-0.9.
> This patch (to graphdefang) should fix it.  Please let me know.
>
> Regards,
>
> David.
>
> diff --git a/contrib/graphdefang-0.9/event/mimedefang.pl/general b/contrib/graphdefang-0.9/event/mimedefang.pl/general
> index 1a82479..080211b 100644
> --- a/contrib/graphdefang-0.9/event/mimedefang.pl/general
> +++ b/contrib/graphdefang-0.9/event/mimedefang.pl/general
> @@ -11,7 +11,7 @@
>
>   $event{'mimedefang.pl'}{'general'} =
>   sub {
> -	if ($text =~ m/^MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
> +	if ($text =~ m/^[A-Za-z0-9]{14}:\s*MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
>
>   		# get values from regular expression
>
>
Hi David,

I was looking over this fix and thought that two small changes might be 
in order.

First, I thought it might be a good idea to update the Changelog to 
reflect the md_syslog change with QueueID: as a compatibility item.

Second, to handle logs in both the new and old format, perhaps something 
like this regex is safer?:

m/^(?:[A-Za-z0-9]{14}:\s*)?MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {

Regards,
KAM




More information about the MIMEDefang mailing list