It would be nice if the ^ prefix worked with on connect events, but something which occurs pretty much instantly after a connection is attempted is the on [color:red]^*:logon:*:{ ... }[/color] event, so you might be able to use that for what you want.