Just add the 'log' keyword on the end of your filters and any packets
that match that rule will cause a syslog. If you want to log all denied
packets at the end of the filter, instead of using the implicit deny set
'deny log' as the last rule.
-MZ
-- Livingston Enterprises - Chair, Department of Interstitial Affairs Phone: 800-458-9966 510-426-0770 FAX: 510-426-8951 megazone@livingston.com For support requests: support@livingston.com <http://www.livingston.com/> Snail mail: 6920 Koll Center Parkway #220, Pleasanton, CA 94566