Stephen Smoogen wrote: You can change the log level with the --log-level addtion to any -j LOG lines LOG_LEVEL="local1" -j LOG --log-level ${LOG_LEVEL} --log-prefix " Blah " Then have local1 in /etc/syslog.conf go to /var/log/iptables.log I also wanted to do this, so I tried it and iptables balked with: iptables v1.2.7a: log-level 'local1' unknown I checked my syslog.h file and found that 'local1' was an alias for the LOG_LOCAL1 facility and not defined as a priority (log level). Suggestions? Jeff |