After finally having enough of this I spent a good 1/2 a day reading up on this.
I'm guessing I either missed it in my tiredness or had a brain-fart.

Apparantly the setup uses klogd where I had to edit an entry

KLOGD =" "

to

KLOGD = "-c 5"

Note to anyone this is for Debian. Other entries are at
www.shorewall.net >Documentation > FAQs > FAQ 6.

Thanks for the time