Atif, On systems with non-broken syslogd you can even do more. This works just fine on my BSDi servers: *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;auth.info;mail.crit /var/log/messages mail.debug /var/log/maillog cron.info /var/log/cron local0.debug /var/log/proxynet local7.debug /var/log/ciscolog *.notice;auth.debug root *.emerg * kern.debug;auth.info @160.33.83.4 mail.crit @160.33.83.4 local0.crit @160.33.83.4 local7.debug @160.33.83.4 Note kern.debug going to three places and local7.debug going to two in the same way (approximately) as you are using. Len