Expand the manpage to say: watch out for nonlocal socks

This clears up the remaining issue stopping me from closing bug 6297.

diff --git a/doc/tor.1.txt b/doc/tor.1.txt
index 1a7f8d597bdde55a2ecfc433c804264875cb7b32..d2687177bb96d4af832e074dc9fbeacb8c2745d2 100644 (file)
--- a/doc/tor.1.txt
+++ b/doc/tor.1.txt
@@ -914,7 +914,13 @@ The following options are useful only for clients (that is, if
         IPv6.)
     **PreferIPv6**;;
         Tells exits that, if a host has both an IPv4 and an IPv6 address,
-        we would prefer to connect to it via IPv6. (IPv4 is the default.)
+        we would prefer to connect to it via IPv6. (IPv4 is the default.) +
++
+    NOTE: Although this option allows you to specify an IP address other than
+    localhost, you should do so only with extreme caution.  The SOCKS
+    protocol is unencrypted and (as we use it) unauthenticated, so exposing
+    it in this way could leak your information to anybody watching your
+    network, and allow anybody to use your computer as an open proxy.
 
 **SOCKSListenAddress** __IP__[:__PORT__]::
     Bind to this address to listen for connections from Socks-speaking