Irule notes

when CLIENT_ACCEPTED {
log local0. "client accepted"
STREAM::expression {=RCPT TO:info@domain.com=RCPT TO:info2@domain.com=}
STREAM::enable
}
when STREAM_MATCHED {
log local0. "iRule SPAM POC Email detected: [STREAM::match]"
}