Since this still has not been addressed. I am going to repeat Andrews objection again. Isn't there a better way to get iptables information out than to use syslog. I did not have time to follow up on that but it did appear that someone did have a better way to get the information out. Essentially the argument against this goes. The kernel logging facility is really not a particularly good tool to be using for anything other than kernel debugging information, and there appear to be no substantial uses for a separate syslog that should not be done in other ways. That design objection must be addressed before merging this code can be given serious consideration. Eric -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html