cdowns <cdowns@drippingdead.com> - Fri, Mar 26, 2004: > get all local7 ( all levels ) and _/ALSO/_ match %ETHC-5 / %CLEAR-5 ? What does your "/" mean? The statement you show is a logical and between the three conditions, meaning that all of them must be satisfied. Ie, you must have a message from local7 matching %ETHC-5 and matching %CLEAR-5 to get through your filter. -- Loïc Minier <lool@dooz.org>