[syslog-ng]Logging to syslog without facility mail

[Laurent CARON]

Hello

I'm trying to exclude certain messages from my syslog (facility mail 
which are inferior to warning)

I tried
filter f_syslog { not facility(auth, authpriv) and not facility(mail); };

It removes all the mail facility from syslog

and then

filter f_syslog { not facility(auth, authpriv) or facility(mail) and 
level(warn .. emerg); };


which is not better at all.

Does anyone have a clue about it?

Thanks

Laurent