catch them there, filter and route to a mail destination, much like the example in the syslog-ng docs that sends triggered messages to an external application: just replace the d_triggers destination. I don't think implementing direct sending from patterndb would be a good idea, for various reasons. One being I have no idea how I'd go around coding it properly. -- |8]