clarify `also-notify-from` docs

diff --git a/docs/settings.rst b/docs/settings.rst
index ef487677f2d40196c657561b2563e7d242d6bf68..3b5ec4ea8415df72546bb59f0b5fa298c9c6ac4e 100644 (file)
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -61,6 +61,10 @@ Allow DNS updates from these IP ranges. Set to empty string to honour ``ALLOW-DN
 Allow AXFR NOTIFY from these IP ranges. Setting this to an empty string
 will drop all incoming notifies.
 
+.. note::
+  IPs allowed by this setting, still go through the normal NOTIFY processing as described in :ref:`modes-of-operation-secondary-operation`
+  The IP the NOTIFY is received from, still needs to be a nameserver for the secondary domain. Explicitly setting this paramater will not bypass those checks.
+
 .. _setting-allow-unsigned-autoprimary:
 
 ``allow-unsigned-autoprimary``