diff --git a/usr.sbin/syslogd/syslog.conf.5 b/usr.sbin/syslogd/syslog.conf.5
--- a/usr.sbin/syslogd/syslog.conf.5
+++ b/usr.sbin/syslogd/syslog.conf.5
@@ -590,7 +590,7 @@
 *.*							-/var/log/ipfw
 
 # Log ipfw messages with "Deny" in the message body.
-:msg, contains, ".*Deny.*"
+:msg, contains, "Deny"
 *.*							/var/log/ipfw.deny
 
 # Reset program name filtering