^start of line
Group datetime(?P<datetime>.+) .+any character (except for line terminators), repeated at least once
host1 postfixthe literal text host1 postfix (case sensitive) .+any character (except for line terminators), repeated at least once
RCPT from the literal text RCPT from (case sensitive) Group srcDns(?P<srcDns>.+) .+any character (except for line terminators), repeated at least once
\[the literal [ (9110 / 1338 / 5B16)
Group srcIp(?P<srcIp>[0-9\.]+) +matches at least one character from the set below:
0-9one character from 0 (4810) to 9 (5710)
\.the literal . (4610 / 568 / 2E16)
\]the literal ] (9310 / 1358 / 5D16)
:the literal : (5810 / 728 / 3A16)
.+any character (except for line terminators), repeated at least once
blocked using the literal text blocked using (case sensitive) Group blkList(?P<blkList>.+?) .+?any character (except for line terminators), repeated at least once
;the literal ; (5910 / 738 / 3B16)
Group 5(.+https?:\/{2}(?P<entryUrl>.+);\s)? ?repeats the group contents below at most once:
.+any character (except for line terminators), repeated at least once
httpthe literal text http (case sensitive) s?optionally matches the literal s (11510 / 1638 / 7316) (case sensitive)
:the literal : (5810 / 728 / 3A16)
\/{2}the literal / (4710 / 578 / 2F16) , repeated exactly 2 times
Group entryUrl(?P<entryUrl>.+) .+any character (except for line terminators), repeated at least once
;the literal ; (5910 / 738 / 3B16)
\sany whitespace character
.+any character (except for line terminators), repeated at least once
\sany whitespace character
to=the literal text to= (case sensitive) Group destEm(?P<destEm>.+?) .+?any character (except for line terminators), repeated at least once
\sany whitespace character
.*any character (except for line terminators), repeated any number of times
$end of line
g modifier: global. Finds all matches instead of stopping after the first
m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string