One more thing: If you like, you can call syslog from your filter, like this: if ($extraordinary_condition) { syslog('err', 'Woah! Found something strange!'); action_bounce('foo'); } -- David.