ffho-salt-public/rsyslog/ffho/30-net.conf

$FileCreateMode 0640
$FileOwner root
$FileGroup adm

if $fromhost-ip startswith '172.30.' and $syslogfacility-text == 'local0' then /var/log/net.log
& ~