Hello, I''m running 1.4.7 on RH 9.0. I have logunclean enabled and set it to ULOG in the configuration file, but it goes to /var/log/messages. The problem that I found was in /usr/share/shorewall/firewall on line 4006. It was: [ -z"$LOGUNCLEAN" ] && LOGUNCLEAN=info Note a missing space after -z. After I''ve added a space everything is fine now. This is what it used to be: Chain logpkt (2 references) pkts bytes target prot opt in out source destination 0 0 LOG !tcp -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 4 level 6 prefix `Shorewall:logpkt:LOG:'' 3 144 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 6 level 6 prefix `Shorewall:logpkt:LOG:'' This is how it is now: Chain logpkt (2 references) pkts bytes target prot opt in out source destination 0 0 ULOG !tcp -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:logpkt:LOG:'' queue_threshold 1 0 0 ULOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1 prefix `Shorewall:logpkt:LOG:'' queue_threshold 1 Alex.