This is almost the same I also did. Except I'm using iptables and logwatch seems good. I'll read it! Thank you