Oops.. spelling again... on that match statement the second pPop in the regex should read "[pP]op" not "[pPop]". Sorry about that. In the words of Herman Munster "Brains are overrated anyway" Ja -----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Ja Wallaby Sent: Friday, November 29, 2002 08:04 To: syslog-ng@lists.balabit.hu Subject: RE: [syslog-ng]Filters filter f_notpop { facility(mail); and not program(pop3program); }; or filter f_notpop { facility(mail); and not match("[pP]op3|[pPop]"); }; You might want to check me and make sure that's right but I think it is. Ja -----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Sergio Alves de Lima Jr. Sent: Friday, November 29, 2002 07:30 To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]Filters Hellow list, I am needing create filter for not log entries of connections of the pop3. Some a idea for resolution? Thanks a lot. []'s Sergio A Lima _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html