Hi Greg,
Hi Colin & Team.
Sorry for delay. My laptop died. New one arrives today. Anyway.
What a pain ... ☺
If you check out /var/log/sec - you will see which rule is being hit. The tag in the log file will also be in one of the rules in /etc/sec/ …
Many thanks - I will see how I get on with editing the rules.
Kind regards
Colin