From ae4856ea7c76017c6b9b5ce8db6d5925d9d27472 Mon Sep 17 00:00:00 2001
From: Daniel Barlow <dan@telent.net>
Date: Mon, 12 Feb 2024 13:56:56 +0000
Subject: [PATCH] improve firewall comment

---
 examples/demo-firewall.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/examples/demo-firewall.nix b/examples/demo-firewall.nix
index 58d6fbf..923c306 100644
--- a/examples/demo-firewall.nix
+++ b/examples/demo-firewall.nix
@@ -233,9 +233,9 @@ in {
     type = "filter";
     family = "ip";
     rules = [
-      # this is where you put permitted incoming
-      # connections. Practically there's not a lot of use for this
-      # chain unless you have routable ipv4 addresses
+      # This is where you put permitted incoming connections. If
+      # you're using NAT, the rules in this chain will see the
+      # internal (RFC1918) addresses.
     ];
   };