i was going throught eh iptables tutorial etc. and regarding logging... i am quite confused. it says somehwere in the tutorial that specifaction of iptables should be iptables -A FORWARD -p tcp -j LOG --log-level debug then somewhere below kern.=info /var/log/iptables in your syslog.conf file and then letting all your LOG messages in iptables use log level info, would make all messages appear in the /var/log/iptables file. so what should be the syslog should it be kern.debug or kern.info or can it be even kern.warn i'm confused. i tried kern.warn and the logs do go to /var/log/iptables (the file i created for itpables logs) but then quite a lot go to /var/log/messages also. i want to avoid the messages going to /var/log/messages any suggestions... regards, Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com Bid for for Air Tickets on Air Sahara Flights at Prices Lower Than Before. Just log on to http://airsahara.indiatimes.com and Bid Now!