Есть proftpd & upnpd, первый пишет в syslog благодаря строкам в конфиге:

ExtendedLog                     syslog:debug auth auth
ExtendedLog                     syslog:debug write write
ExtendedLog                     syslog:debug read read
ExtendedLog                     syslog:debug info info
ExtendedLog                     syslog:debug dirs dirs
ExtendedLog                     syslog:debug misc misc

второго руками прописал в syslog.conf. Полный syslog.conf:

*.err;kern.debug;auth.notice;mail.crit          /dev/console
*.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
security.*                                      /var/log/security
auth.info;authpriv.info                         /var/log/auth.log
mail.info                                       /var/log/maillog
lpr.info                                        /var/log/lpd-errs
cron.*                                          /var/log/cron
*.emerg                                         *
# uncomment this to log all writes to /dev/console to /var/log/console.log
console.info                                    /var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# touch /var/log/all.log and chmod it to mode 600 before it will work
#*.*                                            /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.*                                            @loghost
# uncomment these if you're running inn
# news.crit                                     /var/log/news/news.crit
# news.err                                      /var/log/news/news.err
# news.notice                                   /var/log/news/news.notice
!startslip
*.*                                             /var/log/slip.log
!ppp
*.*                                             /var/log/ppp.log
!ipmon
*.*                                             /var/log/ipf.log
!proftpd
*.*                                             /var/log/proftpd.log
!upnpd
*.=debug                                        /var/log/upnpd.log

*.=debug                                        /var/log/debug.log

ЗАДАЧА: запретить proftpd & upnpd писать в /var/log/debug, а писать только в /var/log/proftpd.log & /var/log/upnpd.log соответственно. Пробовал разные расклады в конфиге - либо не пишет какой либо один демон, либо пишут оба. Прошу помощи.