diff --git a/debian/jail.conf b/debian/jail.conf index 7342cd44..bb010d79 100644 --- a/debian/jail.conf +++ b/debian/jail.conf @@ -226,12 +226,21 @@ logpath = /var/log/mail.log # DNS Servers -# Mention: by default logging is off with bind installation. -# Need smth like + +# These jails block attacks against named (bind9). By default, logging is off +# with bind9 installation. You will need something like this: +# # logging { -# channel security_file { file "/var/log/named/security.log" versions 3 size 30m; severity dynamic; print-time yes; }; -# category security { security_file; }; +# channel security_file { +# file "/var/log/named/security.log" versions 3 size 30m; +# severity dynamic; +# print-time yes; +# }; +# category security { +# security_file; +# }; # } +# # in your named.conf to provide proper logging # Word of Caution: