:msg, contains, "Abuse: " -/var/log/firewall.log
& stop
