$FileCreateMode 0640
$FileOwner root
$FileGroup adm

if $fromhost-ip startswith '172.30.' then /var/log/net.log
& stop