$FileCreateMode 0640 $FileOwner root $FileGroup adm if $fromhost-ip startswith '172.30.' and $syslogfacility-text == 'local0' then /var/log/net.log & ~