Add warning about Client firewall rules without whitelists

diff --git a/sec.mlt b/sec.mlt
index 5c7ea52..1c5a008 100644 (file)
--- a/sec.mlt
+++ b/sec.mlt
@@ -344,6 +344,8 @@ end%>
 
 <p>Please note that <b>your firewall rule will be useless</b> if you don't first request the corresponding socket privileges at the top of this page. Also, common ports like 80 (HTTP) are open to everyone with socket permissions. Verify that you can't access a port after socket permissions have been granted before requesting a special rule here.</p>
 
+<p>We very rarely grant requests for Client rules that don't include remote host whitelists. For example, important security concerns make it a bad idea for us to give anybody blanket IRC permissions. Instead, request specific servers. We will refuse such requests that include networks that are popularly considered fronts for illegal activity.</p>
+
 <form action="sec" method="post">
 <input type="hidden" name="node" value="<% nodeNum %>">
 <input type="hidden" name="uname" value="<% uname %>">