diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml
index 04d04086e..5e0678bc8 100644
--- a/docs/configuration_file_basics.xml
+++ b/docs/configuration_file_basics.xml
@@ -859,6 +859,15 @@ INLINE net $FW ; -m recent --rcheck 10 --hitcount 5 -
COMB_IF !70.90.191.120/29 70.90.191.121 ;; -m statistic --mode random --probability 0.50
COMB_IF !70.90.191.120/29 70.90.191.123
+
+ If the first character of the inline matches is a plus sign
+ ("+"), then the matches are processed before the column-oriented
+ input in the rule. That is required when specifying additional TCP
+ protocol parameters.
+
+ Example from action.TCPFlags:
+
+ DROP - - ;;+ -p 6 --tcp-flags ALL FIN,URG,PSH