Tom A couple of issues with log tag.
Rule: ACCEPT:warn:mail $FW lan:192.168.0.3 tcp 25 generates iptables rule: -A fw2lan -p 6 --dport 25 -d 192.168.0.3 -j LOG --log-level 4 --log-prefix "Shorewall:mail:ACCEPT:" The documentation states that log tag is appended to the end of LOGPREFIX which should give --log-prefix: "Shorewall:fw2lan:ACCEPT:mail:" The second issue. The log level is passed to macros but the log tag is not. rule: sjs/ACCEPT:warn:test $FW lan:192.168.0.3 macro sjs: PARAM - - tcp 22 generates rule: -A fw2lan -p 6 --dport 22 -d 192.168.0.3 -j LOG --log-level 4 --log-prefix "Shorewall:fw2lan:ACCEPT:" If the rule is changed (! is added) to: sjs/ACCEPT:warn!:test $FW $L3 then the log tag is passed to macros. Steven. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users