doc/config-network-server: move warning to more relevant place

diff --git a/doc/config-network-server.rst b/doc/config-network-server.rst
index 469582df03b81982739350119b84681b412709ae..7e98dbca3336883c7ae792d79d59230672aad5a2 100644 (file)
--- a/doc/config-network-server.rst
+++ b/doc/config-network-server.rst
@@ -44,6 +44,13 @@ address + port combination.
       and interface names. Optionally, the port number may be specified using
       ``@`` as a separator, e.g. ``127.0.0.1@3535`` or ``eth0@5353``.
 
+      .. warning::
+
+         On machines with multiple IP addresses, avoid listening on wildcards like
+         ``0.0.0.0`` or ``::``. If a client can be reached through multiple addresses,
+         UDP answers from a wildcard address might pick a wrong source address - most
+         well-behaved clients will then refuse such a response.
+
    .. option:: port: <1-65535>
 
       :default: 53 (dns, xdp), 853 (dot), 443 (doh2, doh-legacy)
@@ -73,13 +80,6 @@ address + port combination.
          kind: xdp
        - unix-socket: /tmp/kres-socket  # bind to unix domain socked
 
-.. warning::
-
-   On machines with multiple IP addresses, avoid listening on wildcards like
-   ``0.0.0.0`` or ``::``. If a client can be reached through multiple addresses,
-   UDP answers from a wildcard address might pick a wrong source address - most
-   well-behaved clients will then refuse such a response.
-
 
 .. _config-network-proxyv2: