:msg,contains,"iptables:" /var/log/iptables.log
& ~