correct "Debian" way to log iptables to seperate file

[JW <jw@mailsw.com>]

Hello,

Iptables is annoying me by:

1) printing logs to the console

2) filling my /var/log/messages up with the same logs, which then get picked 
up and uselessly emailed to me by logcheck and logwatch.

Of course all the logging is controlled by syslog, not iptables.

What I really want is for those logs (which are not worthy of 
their "kernel.warning" status) to go to their own file.

Google searching has turned up dozens of possible options, all of which seem 
like rather untidy hacks.

What's the "right" way to do it?

	JW