I'd like to use the system-config-securitylevel tools to create a basic firewall then add a few things. Mainly some extra logging. `iptables-save' gives me the basic script: # Generated by iptables-save v1.2.11 on Wed Feb 2 20:28:24 2005 *filter [...] This appears to be the only outright reject rule (Wrapped for mail) -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited So I want to add logging to it then use iptables-restore to run it. Just can't see easily how to add logging. This will not load when I run iptables-restore -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited LOG (Wrapped for mail but really one line)