I came up with a slightly different approach:
I'm leaving the Busybox's syslogd in place but sending its logs over a local socket to the syslog-ng instance.
That way if syslogd gets restarted for any reason, it won't conflict with syslog-ng. It also leaves in place the existing mechanism for...
I started to go down the road of setting up my network to isolate some devices from each others (e.g. guests from authenticated, risky IoT & media devices from regular devices), while allowing some supervised communications between the groups (e.g. regular devices can control and present on...
It would be great to be able to only provide the suffix (last 64 bits) of the destination's IP, and have the prefix automatically taken from the IPV6 configuration.
This would allow to avoid reconfiguring manually all the rules for ISPs that tend to to once in a while re-assign a new prefix.