diff --git a/docs/standalone.xml b/docs/standalone.xml
index f599e3561..2c5e12e8b 100644
--- a/docs/standalone.xml
+++ b/docs/standalone.xml
@@ -447,11 +447,25 @@ root@lists:~# </programlisting>
     <ulink url="FAQ.htm#faq17">Shorewall FAQ 17</ulink>, you can usually
     resolve the problem quickly.</para>
 
-    <para>Most commonly, Netfilter messages are logged to
-    <filename>/var/log/messages</filename>. Recent
-    <trademark>SuSE/OpenSuSE</trademark> releases come preconfigured with
-    syslog-ng and log Netfilter messages to
-    <filename>/var/log/firewall</filename>.</para>
+    <para>The Netfilter log location is distribution-dependent:</para>
+
+    <itemizedlist>
+      <listitem>
+        <para>Debian and its derivatives log Netfilter messages to
+        <filename>/var/log/daemon.log</filename>.</para>
+      </listitem>
+
+      <listitem>
+        <para>Recent <trademark>SuSE/OpenSuSE</trademark> releases come
+        preconfigured with syslog-ng and log netfilter messages to
+        <filename>/var/log/firewall</filename>.</para>
+      </listitem>
+
+      <listitem>
+        <para>For other distributions, Netfilter messages are most commonly
+        logged to <filename>/var/log/messages</filename>.</para>
+      </listitem>
+    </itemizedlist>
 
     <para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para>
 
diff --git a/docs/three-interface.xml b/docs/three-interface.xml
index 10086d34c..87d0de675 100644
--- a/docs/three-interface.xml
+++ b/docs/three-interface.xml
@@ -720,11 +720,25 @@ root@lists:~# </programlisting>
     <ulink url="FAQ.htm#faq17">Shorewall FAQ 17</ulink>, you can usually
     resolve the problem quickly.</para>
 
-    <para>Most commonly, Netfilter messages are logged to
-    <filename>/var/log/messages</filename>. Recent
-    <trademark>SuSE/OpenSuSE</trademark> releases come preconfigured with
-    syslog-ng and log netfilter messages to
-    <filename>/var/log/firewall</filename>.</para>
+    <para>The Netfilter log location is distribution-dependent:</para>
+
+    <itemizedlist>
+      <listitem>
+        <para>Debian and its derivatives log Netfilter messages to
+        <filename>/var/log/daemon.log</filename>.</para>
+      </listitem>
+
+      <listitem>
+        <para>Recent <trademark>SuSE/OpenSuSE</trademark> releases come
+        preconfigured with syslog-ng and log netfilter messages to
+        <filename>/var/log/firewall</filename>.</para>
+      </listitem>
+
+      <listitem>
+        <para>For other distributions, Netfilter messages are most commonly
+        logged to <filename>/var/log/messages</filename>.</para>
+      </listitem>
+    </itemizedlist>
 
     <para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para>
 
diff --git a/docs/two-interface.xml b/docs/two-interface.xml
index 18a47771e..83d18b168 100644
--- a/docs/two-interface.xml
+++ b/docs/two-interface.xml
@@ -671,11 +671,25 @@ root@lists:~# </programlisting>
     <ulink url="FAQ.htm#faq17">Shorewall FAQ 17</ulink>, you can usually
     resolve the problem quickly.</para>
 
-    <para>Most commonly, Netfilter messages are logged to
-    <filename>/var/log/messages</filename>. Recent
-    <trademark>SuSE/OpenSuSE</trademark> releases come preconfigured with
-    syslog-ng and log netfilter messages to
-    <filename>/var/log/firewall</filename>.</para>
+    <para>The Netfilter log location is distribution-dependent:</para>
+
+    <itemizedlist>
+      <listitem>
+        <para>Debian and its derivatives log Netfilter messages to
+        <filename>/var/log/daemon.log</filename>.</para>
+      </listitem>
+
+      <listitem>
+        <para>Recent <trademark>SuSE/OpenSuSE</trademark> releases come
+        preconfigured with syslog-ng and log netfilter messages to
+        <filename>/var/log/firewall</filename>.</para>
+      </listitem>
+
+      <listitem>
+        <para>For other distributions, Netfilter messages are most commonly
+        logged to <filename>/var/log/messages</filename>.</para>
+      </listitem>
+    </itemizedlist>
 
     <para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para>