modules/daf: add warning since examples can be misleading

diff --git a/modules/daf/README.rst b/modules/daf/README.rst
index 9b51c73b5c8f9100379c84fb11faa40ff86e22ab..51d7b4abe2ad21f6ddbfe0b04828bea35d9cbaab 100644 (file)
--- a/modules/daf/README.rst
+++ b/modules/daf/README.rst
@@ -55,6 +55,10 @@ Firewall rules are declarative and consist of filters and actions. Filters have
     -- Delete a rule
     daf.del(2)
 
+.. warning:: Only the first matching rule's action is executed.  Defining
+   additional actions for the same matching rule, e.g.  ``src = 127.0.0.1/8``,
+   will have no effect.
+
 If you're not sure what firewall rules are in effect, see ``daf.rules``:
 
 .. code-block:: text