diff -up logwatch-7.3.6/scripts/services/postfix.lost-connection logwatch-7.3.6/scripts/services/postfix --- logwatch-7.3.6/scripts/services/postfix.lost-connection 2009-12-16 12:06:01.208255271 +0100 +++ logwatch-7.3.6/scripts/services/postfix 2009-12-16 12:06:17.115378576 +0100 @@ -1536,7 +1536,7 @@ while ( <> ) { # end of $re_QID section # see also ConnectionLost in $re_QID section - elsif ( ($reason,$host,$hostip) = ($p1 =~ /lost connection (after [^ ]*) (\(\d+ bytes\) )?from ([^[]*)\[($re_IP|unknown)\]$/o )) { + elsif ( ($reason,$host,$hostip) = ($p1 =~ /lost connection (after [^ ]*) (?:\(\d+ bytes\) )?from ([^[]*)\[($re_IP|unknown)\]$/o )) { unless ($hostip =~ /unknown/) { #TD lost connection after DATA (0 bytes) from mail.example.com[192.168.0.1] #TD lost connection after CONNECT from mail.example.com[192.168.0.1]