> The console messages seem to be gone, but dmesg is still clogged with > iptables > junk. Have you tried using ulog? You need to patch your kernel. It allows all firewall logs to go into a nominated log file, and does not put them in the dmesg. I use it in my gentoo server (I'm too scared to use a patched kernel in my deb. installation at work) - instructions are here: http://forums.gentoo.org/viewtopic-t-334079-highlight-.html