[Bug 15] New: 2.0.6 is not compatible with previous version's config file
https://bugzilla.balabit.com/show_bug.cgi?id=15 Summary: 2.0.6 is not compatible with previous version's config file Product: syslog-ng Version: 2.0.x Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: unspecified Component: syslog-ng AssignedTo: bazsi@balabit.hu ReportedBy: welz@fixe-post.de Type of the Report: bug Estimated Hours: 0.0 filter f_mail_count_incoming { program("postfix/smtp") and match("to=") and (match("@mydomain.de") or match("@MYDOMAIN.DE")) and not match("systemmeldung") and match("status=sent"); }; doesn't work since I upgraded from previos version (gentoo linux) However, when I change program("postfix/smtp") to program("postfix") it seems to work, but I have lots of rules and lots of computers, although you would say 12 is not much ;), and I wish to express that it would be absolutely helpful, if syntax changes could be mentioned in the changelog. Regards, Robert -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=15 --- Comment #1 from Balazs Scheidler <bazsi@balabit.hu> 2007-12-29 16:09:41 --- It'd be in the changelog if it was intended, but I didn't intend to change the configuration file format. This is probably caused by one of the message parsing "fixes", probably this one: http://git.balabit.hu/?p=bazsi/syslog-ng-2.0.git;a=commit;h=4a84d904fe0fc5b3... Can you check what happens if you revert the patch above? -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=15 R. Welz <welz@fixe-post.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |welz@fixe-post.de --- Comment #2 from R. Welz <welz@fixe-post.de> 2007-12-29 18:20:20 --- (In reply to comment #1)
It'd be in the changelog if it was intended, but I didn't intend to change the configuration file format.
This is probably caused by one of the message parsing "fixes", probably this one:
http://git.balabit.hu/?p=bazsi/syslog-ng-2.0.git;a=commit;h=4a84d904fe0fc5b3...
Can you check what happens if you revert the patch above?
I fear that I break my system when I change the things that were done by gentoo, but I am willing to compile syslog-ng by hand on one of my production servers. So when I download syslog-ng, compile it and install it in /usr/local/, then stop the original gentoo syslog-ng, and start my /usr/local/ copy of syslog-ng, will that help? When I download the source what do I have to do to substract the diff file from the source? Regards, -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=15 Balazs Scheidler <bazsi@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution| |FIXED Status|NEW |RESOLVED --- Comment #3 from Balazs Scheidler <bazsi@balabit.hu> 2007-12-29 18:48:46 --- I don't want to cause unnecessary work/risk to your production systems. We might solve this problem without touching those. The change I referenced actually changed how "program name" is parsed from incoming log messages to match the RFC, see the mailing list archives, sender "Tsurusawa Takeshi", Oct 22, 2007. Can you confirm that the problem is related to the fact that syslog-ng recognizes "postfix" as the name of the program, whereas it earlier recognized "postfix/smtp"? You originally stated that you were bitten by a configuration file change. Did you mean that syslog-ng refused to start with the new configuration file, _or_ that it behaved differently? And furthermore, if it started but worked differently do you think this is caused by the change I outlined above? (e.g. program name is "postfix" instead of "postfix/smtp") As I'm positive about the issue, I've created an experimental patch, that should address this issue: http://git.balabit.hu/?p=bazsi/syslog-ng-2.0.git;a=commit;h=371106481ce3dd3c... Hopefully this fixes this issue, however some testing would be appreciated. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=15 Balazs Scheidler <bazsi@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|2.0.6 is not compatible with|postfix program name parsing |previous version's config |problem |file | -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=15 --- Comment #4 from R. Welz <welz@fixe-post.de> 2007-12-30 05:13:58 --- (In reply to comment #3)
I don't want to cause unnecessary work/risk to your production systems. We might solve this problem without touching those.
The change I referenced actually changed how "program name" is parsed from incoming log messages to match the RFC, see the mailing list archives, sender "Tsurusawa Takeshi", Oct 22, 2007.
Can you confirm that the problem is related to the fact that syslog-ng recognizes "postfix" as the name of the program, whereas it earlier recognized "postfix/smtp"?
Yes.
You originally stated that you were bitten by a configuration file change. Did you mean that syslog-ng refused to start with the new configuration file, _or_ that it behaved differently?
Sorry, this must be a problem with my english, which is not my mother language. No. it just refused to log postfix/smtp But it MIGHT be, that some other logfiles weren't written to and I THINK that they were in syslog-ng.conf after the postfix/smtp statement. But after changing to "postfix" w/o smtp all behavior is as it used to be.
And furthermore, if it started but worked differently do you think this is caused by the change I outlined above? (e.g. program name is "postfix" instead of "postfix/smtp")
Yes, see above. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=15 Balazs Scheidler <bazsi@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.0.7 --- Comment #5 from Balazs Scheidler <bazsi@balabit.hu> 2007-12-30 09:46:54 --- Ok then, this is what I thought, so the patch holds. I've checked and now it properly recognizes '/' as part of the program name. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
participants (1)
-
bugzilla＠bugzilla.balabit.com