diff --git a/manpages/shorewall-secmarks.xml b/manpages/shorewall-secmarks.xml
index 201c049f5..cd56c75a8 100644
--- a/manpages/shorewall-secmarks.xml
+++ b/manpages/shorewall-secmarks.xml
@@ -41,7 +41,8 @@
 
               <listitem>
                 <para>If an SELinux context is associated with the packet, the
-                context is saved in the connection.</para>
+                context is saved in the connection. Normally, the remaining
+                columns should be left blank.</para>
               </listitem>
             </varlistentry>
 
@@ -51,7 +52,8 @@
               <listitem>
                 <para>If an SELinux context is not currently associated with
                 the packet, then the saved context (if any) is associated with
-                the packet.</para>
+                the packet. Normally, the remaining columns should be left
+                blank.</para>
               </listitem>
             </varlistentry>
 
diff --git a/manpages6/shorewall6-secmarks.xml b/manpages6/shorewall6-secmarks.xml
index 8a8ab7783..2934fe570 100644
--- a/manpages6/shorewall6-secmarks.xml
+++ b/manpages6/shorewall6-secmarks.xml
@@ -41,7 +41,8 @@
 
               <listitem>
                 <para>If an SELinux context is associated with the packet, the
-                context is saved in the connection.</para>
+                context is saved in the connection. Normally, the remaining
+                columns should be left blank.</para>
               </listitem>
             </varlistentry>
 
@@ -51,7 +52,8 @@
               <listitem>
                 <para>If an SELinux context is not currently associated with
                 the packet, then the saved context (if any) is associated with
-                the packet.</para>
+                the packet. Normally, the remaining columns should be left
+                blank.</para>
               </listitem>
             </varlistentry>