I have a firewall script that only allows pre-determined Ip addresses to attempt logon. Allowable access gets logged in /var/log/secure while TCP rules dump all other traffic, and get LOGGED in /var/log/messages. - This is a Home LAN, and that's a lotta data ! Is there a way of redirecting all this to a separate file? Is there a better way to deal with all this? my rules include- # LOG rules go to /var/log/messages iptables -A INPUT -m limit --limit 1/sec --limit-burst 3 -j \ LOG --log-level 4 --log-prefix "FW DROP INPUT: " thanks in advance kate __________________________________ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail