In order to help new IP Filter users, we should add "option IPFILTER_LOG" to generic kernel configs, as well as to ipmon(8) and the LOGGING section of ipf(5). I know I spent quite awhile trying to get logging to work, only to find the solution on the IP Filter web page, and finally in options(4). Jeff Thieleke