diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index ca99a8e00..60f654911 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1186,7 +1186,8 @@ to debug/develop the newnat interface.
LOGBURST=""
It is also possible to set up
- Shorewall to log all of its messages to a separate file.
+ Shorewall to log all of Netfilter's messages to a separate
+ file.
(FAQ 6a) Are there any log parsers that work with
@@ -1254,6 +1255,17 @@ DROP net fw udp 10619
- udp 10619
+
+ (FAQ 6c) cat /proc/sys/kernel/prink returns '4 4 1 7' and still
+ I get dmesg filled up
+
+ Answer: While we would argue
+ that 'dmesg filled up' is not necessarily a problem, the only way to
+ eliminate that is to set up
+ Shorewall to log all of Netfilter's messages to a separate
+ file.
+
+
(FAQ 6d) Why is the MAC address in Shorewall log messages so
long? I thought MAC addresses were only 6 bytes in length.