ulogd is a handy add-on for netfilter/iptables which allows you to
have your firewall logs put somewhere besides the main system logs
Be sure to check the documentation in /usr/doc/ulogd-1.24

You get an init script free of charge: /etc/rc.d/rc.ulogd --
You'll just have to make it executable and call it from one of your
init scripts.  Also, be sure to have a look at /etc/ulogd.conf; 
it works fine with the default, but you might want to customize it...

If you don't want to build with mysql and/or sqlite3 support, you can
run the script with either or both of these specified:
  WITH_MYSQL=no   WITH_SQLITE=no
