diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 32a0ea1f2..c94954f38 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1023,12 +1023,24 @@ DROP net fw udp 10619
(FAQ 16a) Why can't I see any Shorewall messages in
/var/log/messages?
- Answer: The actual log file
- name will likely not be well standardized, but anytime you see no
- logging, it's time to look outside the Shorewall configuration for the
- cause. As an example, recent SuSE releases use
- syslog-ng by default and write Shorewall messages to
+ Answer: First of all, it is
+ important to understand that Shorewall itself does not control where
+ Netfilter log messages are written. The LOGFILE setting in
+ shorewall.conf simply tells the
+ /sbin/shorewall[-lite] program where to look for
+ the log. Also, it is important to understand that a log severity of
+ "debug" will generally be written to fewer log files than a log
+ severity of "info".
+
+ The actual log file where Netfilter messages are written is not
+ standardized; but anytime you see no logging, it's time to look
+ outside the Shorewall configuration for the cause. As an example,
+ recent SuSE releases use syslog-ng by default
+ and write Shorewall messages to
/var/log/firewall.
+
+ Please see the Shorewall
+ logging documentation for further information.