Hi Could someone please help me clarify the logging mechanism between Shorewall and syslog-ng? Both are installed "out-of-the-box". In Shorewall, logging is set to: LOGFILE="/var/log/messages" Well, NO logging is done in that file by Shorewall. All logging is done on the console! I've tried to switch "console" to something else in syslog-ng but logging still comes on the console. Kurt