>From the -current syslogd man page:

     -s      Select ``secure'' mode, in which syslogd does not open a UDP
             socket but only communicates over a UNIX domain socket.  This is
             valuable when the machine on which syslogd runs is subject to at-
             tack over the network and it is desired that the machine be pro-
             tected from attempts to remotely fill logs and similar attacks.

However, looking at the source, this same option also prevents syslogd
to log TO remote hosts.

-Olaf.
--
___ Olaf 'Rhialto' Seibert      D787B44DFC896063 4CBB95A5BD1DAA96 
\X/ Ceci n'est pas un Magritte          rhialto@polder.ubc.kun.nl