Hello, I examined the log analyses tools have been mentioned in the FAQ and I felt the ulog-php is most suitable one but it does log with iptables bad packet using the command iptables -A FORWARD -j ULOG --ulog-nlgroup 1 --ulog-prefix "badif" does this command is suitable to log rules done by shorewall Waiting for replies, and experiences of other member what they are using to watch there log Kind Regards Samer Y. Azmy ________________________________ CONFIDENTIALITY NOTICE This message is intended only for the use of the individual(s) or entity(s) to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure under law. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient,you are hereby notified that any dissemination,distribution or copying of this communication is strictlyprohibited. If you have received this communication in error, please notify us by reply e-mail and delete the original message from your computer. Thank you