diff --git a/docs/config.md b/docs/config.md
index 7d855d9ed0fe..1e8891fe18cf 100644
--- a/docs/config.md
+++ b/docs/config.md
@@ -342,12 +342,13 @@ Tells reprovider what should be announced. Valid strategies are:
 
 Options for configuring the swarm.
 
-- `AddrFilters` An array of address filters (multiaddr netmasks) to filter
-automatic dials to. The ipfs daemon will otherwise attempt to randomly dial
-the default listen port on every IP of the the local network IP range. This
-improves autodiscovery of other daemons in the same network, but may also
-trigger netscan alerts on some hosting providers or cause strain in some
-setups.
+- `AddrFilters`
+An array of addresses (multiaddr netmasks) to not dial. By default, IPFS nodes advertise
+_all_ addresses, even internal ones. This makes it easier for nodes on the same
+network to reach each other. Unfortunately, this means that an IPFS node will
+try to connect to one or more private IP addresses whenever dialing another
+node, even if this other node is on a different network. This may may trigger
+netscan alerts on some hosting providers or cause strain in some setups.
 
 The `server` configuration profile fills up this list with sensible defaults,
 preventing scans to most common local network (`10.0.0.0/8` or