COLOR magenta
{
# beginning of line
#^(... .. ..:..:.. [^ ]+ [^ ]+)
}

COLOR green
{
 (success)[: ]
}

COLOR magenta
{
(Open relay)
rblsmtpd
to (local spam-inwa@inwa.net)
}

COLOR red
{
 (warning: )
 (deferral)[: ]
 (failure)[: ]
}

COLOR yellow
{
#msg ([0-9]{7}):
#msg ([0-9]{7}) to
# delivery number
delivery ([0-9]{3,6}):
# remote address with <#@[]> support
^.*<([!#$%&*+-~_A-Za-z0-9.]+@([-A-Za-z0-9._]+.?[A-Za-z]{2,3}|\[\]))>
# remote address
#^.*(<[\[\]!#$%&*+-~_A-Za-z0-9.]+@[-A-Za-z0-9._]+.?[A-Za-z]{2,3}>)
# local delivery
^.*(local [!#$%&*+-~_A-Za-z0-9.]+@[-A-Za-z0-9._]+.[A-Za-z]{2,3}).*$
# remote delivery
^.*(remote [!#$%&*+-~_A-Za-z0-9.]+@[-A-Za-z0-9._]+.[A-Za-z]{2,3}).*$
}

COLOR cyan
{
# init from (.*)
# pop3 init
#: (port 110) service
# pop3 user
^.*user=([!#$%&*+-~_A-Za-z0-9.]+) .*$
# pop3 host
^.*host=.([-A-Za-z0-9._]*).*$
^.*host=([-A-Za-z0-9._]*).*$
}

COLOR blue
{
# everything else
^(.*)$
}