Stephen Smoogen wrote:

You can change the log level with the --log-level addtion to any -j LOG 
lines

LOG_LEVEL="local1"
-j LOG --log-level ${LOG_LEVEL} --log-prefix " Blah "

Then have local1 in /etc/syslog.conf go to /var/log/iptables.log

I also wanted to do this, so I tried it and iptables balked with:

iptables v1.2.7a: log-level 'local1' unknown

I checked my syslog.h file and found that 'local1' was an alias for the LOG_LOCAL1 facility and not defined as a priority (log level). Suggestions?

Jeff