ulogd is a handy add-on for netfilter/iptables which allows you to
have your firewall logs put somewhere besides the main system logs
Be sure to check the documentation in /usr/doc/ulogd-$VERSION
You get an init script free of charge: /etc/rc.d/rc.ulogd --
You'll just have to make it executable and call it from one of your
init scripts. Also, be sure to have a look at /etc/ulogd.conf;
it works fine with the default, but you might want to customize it...
You'll also need to make sure you have the ULOG target support in
your kernel config.