:msg,contains,"IPT:" -/var/log/iptables.log & ~