-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 maximilian attems wrote:
| please post some loglines that above rules suppress so we can test on them. see attachment. | don't use '.*' i guess a vaild username is [_[:alnum:]-]+ Yes, this is a username. I used '.*' because the username could contain some special characters like '@', '-', '_' and '.' .... maybe you add this 4 characters to the regex. | as soon as both points are covered i'll add your rule to current cvs. by, Martin - -- Powered by Debian GNU / Linux -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDA7+jOvJj+wS6JuIRAq4YAKCHWcqaVC7dKGgQGGu9WFX+wypnLQCdHwrV sMsWNQ8TnbqvC2Iw1EvzFj8= =P1tU -----END PGP SIGNATURE-----
Aug 11 00:16:55 djinn01 HORDE[30618]: [horde] User [EMAIL PROTECTED] [212.202.174.54] logged out of Horde [on line 48 of "/var/svr/cvs.mein-horde.de/htdocs/login.php"] Aug 12 17:35:02 djinn01 HORDE[18267]: [horde] Login success for [EMAIL PROTECTED] [212.202.174.54] to Horde [on line 76 of "/var/svr/cvs.mein-horde.de/htdocs/login.php"] Aug 12 17:35:02 djinn01 HORDE[18200]: [horde] Login success for [EMAIL PROTECTED] [212.202.174.54] to Horde [on line 76 of "/var/svr/cvs.mein-horde.de/htdocs/login.php"] Aug 12 22:19:27 djinn01 HORDE[18200]: [horde] User [EMAIL PROTECTED] [212.202.174.54] logged out of Horde [on line 48 of "/var/svr/cvs.mein-horde.de/htdocs/login.php"]

