actually, this is a Livingston problem screaming for a livingston code
fix, and this was more of an informational post than one asking for help.
The filter is living fine without any 'log' statement.
The problem is pretty universal. If you want to reproduce it: put an
ethernet ofilter on your ether0 port that denies packets with a
source address OTHER than the network your PPP-attached customers are
in, and make the final deny line contain the 'log' statement.
Now watch customers logging off or even better: losing their carriers
in the middle of say: an http transaction. instant flood in the log via
the deny statement. voila.
bye,Kai