Further adventures in Firewall upgrades

[Brian Densmore]

> ...so why not add code to iptables to log directly to a remote syslog
> server?  I can't imagine it would take more than 200 lines of code,
> including command parsing, data structures, and syslog packet 
> generation.
Not necessary to code. You can add iptables rules to log and the init
script for iptables
can tell it where to log. Still I can't imagine using this, unless you
never have 
to worry about changes.