i needed to setup logging for iptables anyway, maybe this is a good time to do it