> > -A drop-log -j LOG --log-level notice --log-prefix "DENY " > Hmm, this exact command (pasted from your message) is working fine here. > Perhaps it's a shell issue? You may want to try this: -A drop-log -j LOG --log-level notice --log-prefix DENY\ Note - there's a space -after- the slash... So you're pushing [E][N][Y][\][space][ENTER] --Rob