[all variants] iptables logging

Hi

I'd like to add some extra logging on my server regarding configuration changes of security related settings.

One such thing could be whenever someone adds, removes or changes settings in iptables.

Iptables is the primary conce now, but it would be nice to also get other configuration changes logged. Like changing ip-addresses, adding nics, enabling/disabling forwarding, syncookies etc etc.

Is there any way to tell the keel to log any security related changes? It should be pretty normal that changes of security should be logged. I don't understand why this isn't enabled by default.

BR,
Peter