Hello, I saw this post: http://lists.balabit.hu/pipermail/syslog-ng/2001-November/002760.html and I'm kinda having a simular problem, but I can't even get logging to work. At one point I had the pix logs going to console... Now I got nothing.. Heres what I got in syslog-ng.conf destination pix { file("/var/log/pix.log"); }; # # host filters # filter f_pix { host(10.1.5.3); }; log { source(src); filter(f_pix); destination(pix); }; Does it matter where you put this lines? thanks for the help if u can.. oh yea pix has this enabled: pixfirewall# show loggi Syslog logging: enabled Timestamp logging: disabled Standby logging: disabled Console logging: disabled Monitor logging: disabled Buffer logging: disabled Trap logging: disabled History logging: disabled along with ogging on no logging timestamp no logging standby no logging console no logging monitor no logging buffered no logging trap no logging history logging facility 20 logging queue 512 logging host inside 10.1.5.222 thanks for any help -steve