From 5d6d07508dae8885dcc13a708c82b2677bd14b96 Mon Sep 17 00:00:00 2001
From: Yaroslav Halchenko <debian@onerussian.com>
Date: Wed, 5 Mar 2008 23:18:04 -0500
Subject: [PATCH] minor: adjusted comment for named jails to come closer to
 upstream

---
 debian/jail.conf | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/debian/jail.conf b/debian/jail.conf
index 7342cd44..bb010d79 100644
--- a/debian/jail.conf
+++ b/debian/jail.conf
@@ -226,12 +226,21 @@ logpath  = /var/log/mail.log
 
 # DNS Servers
 
-# Mention: by default logging is off with bind installation.
-# Need smth like
+
+# These jails block attacks against named (bind9). By default, logging is off
+# with bind9 installation. You will need something like this:
+#
 # logging {
-#       channel security_file { file "/var/log/named/security.log" versions 3 size 30m; severity dynamic; print-time yes; };
-# 		category security { security_file; };
+#     channel security_file {
+#         file "/var/log/named/security.log" versions 3 size 30m;
+#         severity dynamic;
+#         print-time yes;
+#     };
+#     category security {
+#         security_file;
+#     };
 # }
+#
 # in your named.conf to provide proper logging
 
 # Word of Caution: