diff --git a/emhttp/plugins/dynamix/SyslogSettings.page b/emhttp/plugins/dynamix/SyslogSettings.page
index 6dbff1a0d..48e28348b 100644
--- a/emhttp/plugins/dynamix/SyslogSettings.page
+++ b/emhttp/plugins/dynamix/SyslogSettings.page
@@ -147,7 +147,7 @@ _(Local syslog number of files)_:
 
 _(Remote syslog server)_:
 : <span class="span"><input type="text" name="remote_server" class="narrow" value="<?=_var($syslog,'remote_server')?>" maxlength="23" placeholder="_(name or ip address)_"></span>
-  <select name="remote_protocol" class="narrow" size="1">
+  <select name="remote_protocol" class="narrow">
   <?=mk_option(_var($syslog,'remote_protocol'), "udp", _("UDP"))?>
   <?=mk_option(_var($syslog,'remote_protocol'), "tcp", _("TCP"))?>
   </select>
@@ -156,13 +156,21 @@ _(Remote syslog server)_:
 :syslog_remote_server_help:
 
 _(Mirror syslog to flash)_:
-: <select name="syslog_flash" size="1">
+: <select name="syslog_flash">
   <?=mk_option(_var($syslog,'syslog_flash'), "", _("No"))?>
   <?=mk_option(_var($syslog,'syslog_flash'), "1", _("Yes"))?>
   </select>
 
 :syslog_mirror_flash_help:
 
+_(Copy syslog to flash on shutdown)_:
+: <select name="syslog_shutdown">
+  <?=mk_option(_var($syslog,'syslog_shutdown'), "", _("Yes"))?>
+  <?=mk_option(_var($syslog,'syslog_shutdown'), "1", _("No"))?>
+  </select>
+
+:syslog_shutdown_flash_help:
+
 &nbsp;
 : <input type="button" value="_(Apply)_" onclick='validatePort(this.form)' disabled><input type="button" value="_(Done)_" onclick="done()">
 </form>
diff --git a/etc/rc.d/rc.6 b/etc/rc.d/rc.6
index ad482df8b..600cb1f25 100755
--- a/etc/rc.d/rc.6
+++ b/etc/rc.d/rc.6
@@ -189,7 +189,7 @@ if [[ -x /etc/rc.d/rc.udev ]]; then
   /etc/rc.d/rc.udev force-stop
 fi
 
-# Kill all remaining processes.
+# Kill all remaining processes (including rsyslogd)
 OMITPIDS="$(for P in $(/usr/bin/pgrep mdmon); do /bin/echo -o $P; done)" # Don't kill mdmon
 if [[ $1 != fast ]]; then
   log "Sending all processes the SIGTERM signal."
@@ -202,7 +202,22 @@ fi
 # limetech - let's keep this on the USB flash
 # Carry a random seed between reboots.
 /usr/sbin/seedrng
-/bin/cp /var/lib/seedrng/seed.credit /boot/config/random-seed 2>/dev/null
+/bin/cp -f /var/lib/seedrng/seed.credit /boot/config/random-seed 2>/dev/null
+
+# If "Mirror syslog to flash" is disabled and "Copy" is enabled (default) then copy current syslog to flash
+# The copied file will become /boot/logs/syslog-previous after next boot (see rc.M)
+# Safety feature: copy only when enough space is available on the flash device
+CFG=/boot/config/rsyslog.cfg
+[[ -r $CFG ]] && MIRROR=$(grep -Pom1 '^syslog_flash="\K[^"]+' $CFG)
+[[ -r $CFG ]] && COPY=$(grep -Pom1 '^syslog_shutdown="\K[^"]+' $CFG)
+if [[ ! -f /boot/logs/syslog && -z $MIRROR && -z $COPY ]]; then
+  AVAIL=$(/bin/df --output=avail /boot | /bin/awk '(NR>1){print $1*1024}')
+  SIZE=$(($(/bin/stat -c%s /var/log/syslog)*2))
+  if [[ $AVAIL -ge $SIZE ]]; then
+    log "Saving syslog to flash"
+    /bin/cp -f /var/log/syslog /boot/logs/syslog
+  fi
+fi
 
 # Before unmounting file systems write a reboot or halt record to wtmp.
 /sbin/$SHUTDOWN_COMMAND -w