/var/log/shorewall-ifupdown.log {
  missingok
  notifempty
  create 0600 root root
}