From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4jB7kF3BVPz2yVn for ; Fri, 23 Oct 2026 16:28:37 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4jB7k96p9Zz2xXH for ; Fri, 23 Oct 2026 16:28:33 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4jB7k82RnVz1lb; Fri, 23 Oct 2026 16:28:32 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1792772912; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=Q2BvqXrDu+r8w2hcqg31l2ZVQ4bIQgfM55AGQHDqi00=; b=R+u+rQ9XWYwRQVk7Nx33YkUluY4Pt9JQ7ZdhzIUfGYZB1DBIMIfPdT7rp5SS8meSwcDp6w O8TA1K29PLGjJnBg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1792772912; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=Q2BvqXrDu+r8w2hcqg31l2ZVQ4bIQgfM55AGQHDqi00=; b=VCyfda2K8ZtF3CHaVWq2C/2eVGUJyITKzMkuqxhaNblyalqm98HrT6DxPtHXMUExl3BuaG w7WCQpgd/VcMmD0tgDsuCobzbUfB+YDQDUyFZZqauEwrxf9ur3iDfCKokp2LWjed6BQBA0 RDn3pTB272HmVCCxOEzAAWLFxMCpTwBgJyB7MKptTyMGKzI8MDX+hEIppAqLOJQWBgMfw2 hhVmP5l0fjDtyxohhup886SU1DkWbBox+H3lP7rHXf7oohKzeFHi4dKTH2DZRoWGMGps60 aLBwmbc3SXT60h2GmltMzs2UCx4/+G9gpeVZ1ZvzeY3mGR+LGpRqBVJWHM1CMw== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] logwatch: Adjust the syslogd and dhcpd services to fix firewall summary Date: Fri, 23 Oct 2026 18:28:30 +0200 Message-ID: <20261023162830.4054181-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - In the IPFire firewall summary that is shown on a daily basis, there are lines included from syslod and dhcpd that are not needed to be shown. - With syslogd every time a restart is carried out there are also lines related to the socket removal, creation & opening for port 514. These lines were always being shown as ***Unmatched entries***. This patch now filters them and does not display them when the restart is shown. - With dhcpd there were a lot of execute_statement_argv[x] entries being shown as ***Unknown Entries***. These are not needed to be shown as the process already shows dhcp lease requests. This patch now filters them and does not display them. - This has been done via a patch of the source tarball rather than copying the files into /usr/share/logwatch/scripts/services/ or /etc/logwatch/scripts/services/. Both of these approaches would mean that any updates of the service file from the logwatch developers would not end up being used as they would be overwritten. The patch only adds the changes into the provided logwatch service files, so any improvements will be included in any updates. Tested-by: Adolf Belka Signed-off-by: Adolf Belka --- lfs/logwatch | 2 ++ ...tement_argv_lines_from_dhcpd_service.patch | 13 +++++++++++ ...ve_socket_lines_from_syslogd_service.patch | 23 +++++++++++++++++++ 3 files changed, 38 insertions(+) create mode 100644 src/patches/logwatch/logwatch-7.15-remove_execute_statement_argv_lines_from_dhcpd_service.patch create mode 100644 src/patches/logwatch/logwatch-7.15-remove_socket_lines_from_syslogd_service.patch diff --git a/lfs/logwatch b/lfs/logwatch index cbfa139f1..6fa644341 100644 --- a/lfs/logwatch +++ b/lfs/logwatch @@ -76,6 +76,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.11-disable_iptables.patch cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.11-enable-mdadm-sudo.patch cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.15-Revert_sbin_to_bin_change.patch + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.15-remove_execute_statement_argv_lines_from_dhcpd_service.patch + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.15-remove_socket_lines_from_syslogd_service.patch @cd $(DIR_APP) && chmod 755 install_logwatch.sh cd $(DIR_APP) && yes "" | ./install_logwatch.sh diff --git a/src/patches/logwatch/logwatch-7.15-remove_execute_statement_argv_lines_from_dhcpd_service.patch b/src/patches/logwatch/logwatch-7.15-remove_execute_statement_argv_lines_from_dhcpd_service.patch new file mode 100644 index 000000000..d275dddf3 --- /dev/null +++ b/src/patches/logwatch/logwatch-7.15-remove_execute_statement_argv_lines_from_dhcpd_service.patch @@ -0,0 +1,13 @@ +--- logwatch-7.15/scripts/services/dhcpd.orig 2026-10-20 17:37:26.280004330 +0200 ++++ logwatch-7.15/scripts/services/dhcpd 2026-10-22 12:11:47.720231072 +0200 +@@ -259,6 +259,10 @@ + $data{'Late or spurious Echo Reply for'}{$1}++; + } elsif ($line =~ /^ICMP Echo reply while lease ([\da-fA-F\.:]+) valid/) { + $data{'Echo reply while lease valid'}{$1}++; ++ } elsif ($line =~ /^execute_statement argv\[\d+\] =/) { ++ # Do nothing ++ } elsif ($line eq 'execute: /usr/sbin/dhcp-lease exit status 512') { ++ # Do nothing + } else { + $data{'Unknown Entries'}{$line}++; + } diff --git a/src/patches/logwatch/logwatch-7.15-remove_socket_lines_from_syslogd_service.patch b/src/patches/logwatch/logwatch-7.15-remove_socket_lines_from_syslogd_service.patch new file mode 100644 index 000000000..516c5ae25 --- /dev/null +++ b/src/patches/logwatch/logwatch-7.15-remove_socket_lines_from_syslogd_service.patch @@ -0,0 +1,23 @@ +--- logwatch-7.15/scripts/services/syslogd.orig 2026-10-20 17:37:26.190001574 +0200 ++++ logwatch-7.15/scripts/services/syslogd 2026-10-22 12:12:08.963750264 +0200 +@@ -27,7 +27,7 @@ + my $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0; + + #Init Counters +-my $Kills= my $Starts= my $Errors= ++my $Kills= my $Starts= my $Errors= + 0; + + #Init Hashes +@@ -49,6 +49,11 @@ + elsif ($ThisLine =~ /^Cannot glue message parts together$/) { + $Errors++; + } ++ elsif ($ThisLine eq 'Opened inet socket *:514' || ++ $ThisLine eq 'Closing inet socket *:514' || ++ $ThisLine eq 'Created UNIX socket /dev/log') { ++ # Do nothing ++ } + else { + # Report any unmatched entries... + $OtherList{$ThisLine}++; -- 2.56.0