diff --git a/config/jail.conf b/config/jail.conf
index b74ae57a..701b92ff 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -657,6 +657,9 @@ findtime = 86400   ; 1 day
 maxretry = 5
 
 
+# Generic filter for PAM. Has to be used with action which bans all
+# ports such as iptables-allports, shorewall
+
 [pam-generic]
 # pam-generic filter can be customized to monitor specific subset of 'tty's
 banaction = iptables-allports