A FireWall-centric LinuxDistribution with a web-based configuration interface.
Since having /var/log mounted is not essential for continued running, this is easy as long as you have another machine to copy everything to.
rsync(1) is not included with IPCop by default, so SCP it from another machine:
scp -P 222 /usr/bin/rsync ipcop:/usr/bin/rsync
On the backup machine:
rsync -vaz -e 'ssh -p 222' ipcop:/var/log/\* .
This recursively copies the directory contents, preserving file attributes, using compression. The -e switch tells rsync(1) how to invoke ssh(1). It is necessary because the IPCop SSH daemon runs on port 222.
Now on the IPCop machine, make a new file system with approx 4 times as many Inodes as before:
umount /var/log mke2fs -j -N 65536 /dev/harddisk3 mount /var/log
And now copy the whole thing back:
rsync -avz -e 'ssh -p 222' . ipcop:/var/log