doc: clarifying Firewall caveats

sqproxy · Aug 1, 2021 · 092e6fb · 092e6fb
1 parent 9ef9c40
commit 092e6fb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -11,6 +11,10 @@ eBPF is more efficient way to check/accept/drop packets in Linux
 
 [More in Wikipedia](https://en.wikipedia.org/wiki/Berkeley_Packet_Filter)
 
+### Firewall
+
+As redirection and filtering processed before any firewall rules applied, you also need ensure target (redirect) ports are accessable from external network.
+If your server placed behind NAT and all rules live in router, you do not need do anything.
 
 ## Requirements