diff --git a/etc/inc/system.inc b/etc/inc/system.inc
index a19f0ed6e8..b98889d61f 100644
--- a/etc/inc/system.inc
+++ b/etc/inc/system.inc
@@ -337,6 +337,14 @@ function system_syslogd_start() {
 			printf("Error: cannot open syslog.conf in system_syslogd_start().\n");
 			return 1;
 		}
+
+                if (isset($syslogcfg['logall'])) {
+			$syslogconf .= <<<EOD
+*.*		                                @{$syslogcfg['remoteserver']}
+
+EOD;
+		}
+
 		$syslogconf .= "!ntpdate,!ntpd\n";
 		if (!isset($syslogcfg['disablelocallogging'])) {
 			$syslogconf .= <<<EOD
@@ -433,12 +441,6 @@ security.*					@{$syslogcfg['remoteserver']}
 auth.info;authpriv.info;daemon.info		@{$syslogcfg['remoteserver']}
 *.emerg						@{$syslogcfg['remoteserver']}
 
-EOD;
-		}
-                if (isset($syslogcfg['logall'])) {
-			$syslogconf .= <<<EOD
-*.*		                                @{$syslogcfg['remoteserver']}
-
 EOD;
 		}
 		fwrite($fd, $syslogconf);
@@ -1280,4 +1282,4 @@ function system_enable_arp_wrong_if() {
 	mwexec("/sbin/sysctl -n net.link.ether.inet.log_arp_movements=1");
 }
 
-?>
+?>
\ No newline at end of file