>> On my OpenBSD 6.2 syslogd is listening to port 514 >> [...] >> prevent syslogd from opening that port in the first place?
> If [...] no logging rules exist to send to a remote > host the socket is closed per default since 6.2. Perhaps you are logging > to a remote host? Thank you for you answer, indeed I am logging to a remote host. However, I don't understand why logging to a remote host opens port 514 incoming. Anyway, I understand you're saying that this is intended behaviour and cannot be circumvented other than using pf, right?