diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml
index 71d953afa..fe1a60e30 100644
--- a/docs/configuration_file_basics.xml
+++ b/docs/configuration_file_basics.xml
@@ -1598,6 +1598,30 @@ DNAT net loc:192.168.1.3 tcp 4000:4100
passes, one of the bursts will be regained; if no packets hit the rule for
30 seconds, the burst will be fully recharged; back where we
started.
+
+
+ The LOGRATE and LOGBURST options are deprecated in favor of
+ LOGLIMIT.
+
+
+ Shorewall also supports per-IP rate limiting.
+
+ Another example from shorewall.conf (5):
+
+
+ LOGLIMIT="s:5/min:5"
+
+
+ Here, the leading "s:" indicates that logging is to be limited by
+ source IP address ("d:" would indicate limiting by destination IP
+ address).
+
+ "s:" is followed by the rate (5 messages per minute) and the burst
+ (5).
+
+ The rate and limit arguments have the same meaning as in the example
+ above.