Mr. Demeanour wrote: > Hi, > > I have a Speedtouch router that produces firewall events whose PRI value > is <84> (auth.notice, according to RFC3164). Sorry; that should be "auth.warn". -- Jack.