[rsyslog] help with config syntax

[Andy Smith]

Hi,

   Im having trouble getting the config setup how I need it. On a mail  
server I have a lot of data being written to the main messages file,  
thats because I have mail daemons writting data with a "notice"  
severity that is configured to be written to messages (so this is  
expected). How can I prevent just mail.notice going to the messages  
file while keeping all other *.notice stuff going there? I tried  
adding !mail.notice to the config for the messages file but this didnt  
seem to work...
Here is my config:

*.err;kern.warning;auth.notice;mail.crit;local7.none             
/dev/console;Tra
ditionalFormatWithPRI
mail.info;mail.notice                                    
-/var/log/maillog;Tradit
ionalFormatWithPRI
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.none       
  -/var/log/messages;TraditionalFormatWithPRI
security.*                                      /var/log/security
auth.info;authpriv.info                         /var/log/auth.log
lpr.info                                        /var/log/lpd-errs
ftp.info                                        /var/log/xferlog
cron.*                                          /var/log/cron
*.=debug;local7.none                                    /var/log/debug.log
*.emerg                                         *

thanks Andy.