X-Git-Url: https://git.phdru.name/?a=blobdiff_plain;f=playbooks%2Froles%2Flogcheck%2Ffiles%2Fignore.d%2Flocal-named;h=0b96f7d3975b80e283ea48bcb9d6d5cae0cf536b;hb=119883da0314743983a0c4ce7c5ecb7892aa18a6;hp=918c49b6da504910b95119ce085d1396e1a5fb80;hpb=d5582b93feead8b34c5af50eff8b34b1e6149421;p=ansible.git

diff --git a/playbooks/roles/logcheck/files/ignore.d/local-named b/playbooks/roles/logcheck/files/ignore.d/local-named
index 918c49b..0b96f7d 100644
--- a/playbooks/roles/logcheck/files/ignore.d/local-named
+++ b/playbooks/roles/logcheck/files/ignore.d/local-named
@@ -1,9 +1,20 @@
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: +validating .+: (no valid signature found|got insecure response; parent indicates it should be secure)
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (Accepting )?TCP connection failed: socket is not connected
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: (REFUSED|SERVFAIL) unexpected RCODE resolving
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: +validating .+: (bad cache hit|no valid signature found|got insecure response; parent indicates it should be secure)
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: .*zone transfer 'phdru.name/AXFR/IN' denied
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: DNS format error from ([0-9]{1,3}\.){3}[0-9]{1,3}#[0-9]{1,5} resolving
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: _default: sending trust-anchor-telemetry query
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: broken trust chain resolving
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: chase DS servers resolving
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: client ([0-9]{1,3}\.){3}[0-9]{1,3}#[0-9]{1,5}: message parsing failed
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: client .*([0-9]{1,3}\.){3}[0-9]{1,3}#[0-9]{1,5} \([._[:alnum:]-]+\): query (\(cache\) )?'.+' denied
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: client 192\.168\.3\.20#[0-9]+ \([._[:alnum:]-]+\): error sending response: host unreachable$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: clients-per-query (de|in)creased to
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: managed-keys-zone: Key [0-9]+ for zone \. acceptance timer complete: key now trusted
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: managed-keys-zone: Key [0-9]+ for zone \. is now trusted \(acceptance timer complete\)$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: missing expected cookie
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: network unreachable resolving
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: no valid RRSIG resolving '.+/DNSKEY/IN': ([0-9]{1,3}\.){3}[0-9]{1,3}#53
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: resolver priming query complete
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: skipping nameserver '[A-Za-z0-9._-]+' because it is a CNAME, while resolving
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: validating .+: verify failed due to bad signature \(keyid=[0-9]+\): RRSIG has expired