touch /var/log/iptables.log
chown syslog.adm /var/log/iptables.log