iptables, changing log file from /var/log/messages
 

Is it possible to change the log file for iptables from /var/log/messages to something like /var/log/filewall? I've googled but can't find anything, thanks.

You could add something like this to "/etc/syslog.conf":

kern.* -/var/log/firewall

? hope this helps, but I think it will still log IPCHAINS/TABLES actions to messages unless you specify a specific rule for this.

What I really want is all iptables to go to one log file and not to messages.
Thanks

also try man syslog.conf

I see this in there might help:

# Log all mail.info and news.info messages to info
#
mail,news.=info /var/adm/info

This will extract all messages that come either with mail.info or with news.info and store them in the file
/var/adm/info.