Writing some messages to multiple locations is a pretty normal thing in all UNIX / Linux syslog configurations, so I would just leave it alone. You're not going to gain much of anything for all the ...
Use the documentation. Man syslogd(8). Specifically you want the '-r' option. You'll probably need to modify your init scripts to get it to take, or they may be a configfile in /etc/defaults or ...
Lance Spitzner of the Honeynet Project (www.honeynet.org) suggests a trick that's useful for honey (decoy) nets and maybe even for production DMZs: stealth logging. This trick allows a host connected ...