diff --git a/docs/ipsets.xml b/docs/ipsets.xml
index 0a807698c..825fd1329 100644
--- a/docs/ipsets.xml
+++ b/docs/ipsets.xml
@@ -56,12 +56,13 @@
xtables-addons
if they are not available in your current distribution. Instructions for
installing xtables-addons may be found in the Dynamic Zones article.
- Note that xtables-addons might not be required
- with the 'ipset' package provided by your distribution.
- See also the section capabilities
- in the configuration file basics article
- and the Shorecap program.
+ url="Dynamic.html">Dynamic Zones article. Note that xtables-addons
+ might not be required with the 'ipset' package provided by your
+ distribution. See also the section capabilities in
+ the configuration file basics
+ article and the Shorecap
+ program.
Ipset allows you to create one or more named sets of addresses then
use those sets to define Netfilter/iptables rules. Possible uses of ipsets
@@ -151,6 +152,11 @@ ACCEPT net:+sshok $FW tcp 22
url="manpages/shorewall.conf.html">shorewall.conf (5).
+
+ You must have at least one entry in the other configuration
+ files that uses an ipset.
+
+
You cannot use an ipset in shorewall-stoppedrules