diff --git a/Samples/three-interfaces/policy b/Samples/three-interfaces/policy
index de01405cd..338e7cf68 100644
--- a/Samples/three-interfaces/policy
+++ b/Samples/three-interfaces/policy
@@ -29,6 +29,12 @@
 #			log message is generated. See syslog.conf(5) for a
 #			description of log levels.
 #
+#			Beginning with Shorewall version 1.3.12, you may
+#			also specify ULOG (must be in upper case). This will
+#			log to the ULOG target and sent to a separate log
+#			through use of ulogd
+#			(http://www.gnumonks.org/projects/ulogd).
+#
 #			If you don't want to log but need to specify the
 #			following column, place "_" here.
 #
diff --git a/Samples/three-interfaces/rules b/Samples/three-interfaces/rules
index aacea2033..9f2ee4aa9 100755
--- a/Samples/three-interfaces/rules
+++ b/Samples/three-interfaces/rules
@@ -31,6 +31,13 @@
 #			level (e.g, REJECT:info). This causes the packet to be
 #			logged at the specified level.
 #
+#			Beginning with Shorewall version 1.3.12, you may
+#			also specify ULOG (must be in upper case) as a log level.\
+#			This will log to the ULOG target and sent to a separate log
+#			through use of ulogd
+#			(http://www.gnumonks.org/projects/ulogd).
+#
+#
 #	SOURCE		Source hosts to which the rule applies. May be a zone
 #                       defined in /etc/shorewall/zones, $FW to indicate the
 #			firewall itself, or "all" If the ACTION is DNAT or