{
    my $logging = $masq{Logging} || "none";

    if ( $logging eq "none" )
    {
        $OUT .= " /sbin/iptables --replace denylog 1 --jump DROP";
    }
    elsif ($logging eq "all")
    {
        $OUT .= <<'HERE';
    /sbin/iptables --replace denylog 1 --jump LOG --log-prefix "denylog:"
    /sbin/iptables --replace denylog 2 --jump DROP
HERE
    }
    else
    {
        $OUT .= <<'HERE';
    /sbin/iptables --replace denylog 1 -p udp --dport 520 --jump DROP
    /sbin/iptables --replace denylog 2 -p udp --dport 137:139 --jump DROP
    /sbin/iptables --replace denylog 3 -p tcp --dport 137:139 --jump DROP
    /sbin/iptables --replace denylog 4 --jump LOG --log-prefix "denylog:"
HERE
    }
}
