I wanted to fix this differently, so -S would not be necessary.
The ideal state:
1) -s controls acceptance of inbound datagrams.
2) syslog.conf controls whether outbound datagrams get sent.
If no "log to other host" rules were set in syslog.conf, and -s were
in force, no socket would be opened/left open.
- Bill