I think I put an example in the faq on how to store logs in files/dirs according to the source IP or DNS hostname but store the log entries with the hostname the client sent. Something like that is a good balance between the two, don't trust the client but still have record of what was sent. -- Nate Campi