#:msg,contains,"_DROP" /var/log/firewall.log #& stop #:msg,contains,"_REJECT" /var/log/firewall.log #& stop