iptables and config-securitylevel

[Harry Putnam]

I'd like to use the system-config-securitylevel tools to create a
basic firewall then add a few things.  Mainly some extra logging.

`iptables-save' gives me the basic script:
   # Generated by iptables-save v1.2.11 on Wed Feb  2 20:28:24 2005
  *filter

[...]

This appears to be the only outright reject rule
(Wrapped for mail)

  -A RH-Firewall-1-INPUT -j REJECT --reject-with 
  icmp-host-prohibited

So I want to add logging to it then use iptables-restore to run it.
Just can't see easily how to add logging.

This will not load when I run iptables-restore

-A RH-Firewall-1-INPUT -j REJECT --reject-with 
 icmp-host-prohibited  LOG

(Wrapped for mail but really one line)