<div dir="ltr">Also, according to RFC2822, the Subject header may be included 0 or 1 times.<div>And it isn't there, then the message would not be logged.</div><div><br></div><div>dave</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Nov 22, 2016 at 1:38 PM, Ross Wheeler <span dir="ltr"><<a href="mailto:ausnog@rossw.net" target="_blank">ausnog@rossw.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
/^Subject:/      WARN<br>
This will put a single line in your logs like the following<br>
warning: header Subject: "Subject line"[src ip addr]; from=<<a href="mailto:src@address.com" target="_blank">src@address.com</a>> to=<<a href="mailto:dst@address.com" target="_blank">dst@address.com</a>> proto=ESMTP helo=<src server><br>
</blockquote>
<br></span>
Is not the "Subject" header part of the "content of a mail message" and therefore explicitly NOT to be captured under the legislation?<div class="HOEnZb"><div class="h5"><br>
______________________________<wbr>_________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailma<wbr>n/listinfo/ausnog</a><br>
</div></div></blockquote></div><br></div>