If the system has been up for a month or so and I try to reapply the firewall rules, something odd happens. Instead of getting the normal IPTables entries:
Feb 2 18:29:47 fwhost -- MARK --
The MARK entry is used to help debug when a box crashed (or similar stuff). man syslogd may be of use for you.
Sincerely,
Andrew Griffiths
--
<cc> well you'll know better next time
<cc> embrace nothingness
<joe> do i get a spanking?
<cc> would you like one...?
* joe exposes his rump
* cc smacks joe's ass
* joe groans