Hi, You need to make two separate rules. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2799 bytes Desc: not available Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140326/46857f58/attachment.bin