I have a filter looking like this: filter f_cyrus { program("imap") or program("master") or program("lmtpunix") or program("ctl_cyrusdb"); }; But it doesn't work 100%.... I get the log from imap and lmtpunix and ctl_cyrusdb, but not for master... Why not? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj@havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" -----------------------------------------------------------------------------------------------