{"filter":[{"unescaped":1,"actions":[{"dest":"/dev/null","action":"save"}],"rules":[{"match":"contains","opt":"or","val":"cron deamon","part":"$header_from:"}],"filtername":"cron deamon"}],"version":2.2}