diff --git a/Block Connection to localhost.md b/Block Connection to localhost.md
index 0d24aa7..2ff3553 100644
--- a/Block Connection to localhost.md	
+++ b/Block Connection to localhost.md	
@@ -2,6 +2,8 @@ From 2.6.3, you can prevent the server from connecting to some IP like 127.0.0.1
 
     ssserver -c /etc/shadowsocks.json --forbidden-ip 127.0.0.1,::1
 
-Notice only IPv4 and IPv6 addresses are allowed. This is because if a client
-tries to visit a hostname, like `localhost`, it will be resolved into
-`127.0.0.1` or `::1`, it still gets blocked.
\ No newline at end of file
+Notice only IPv4 and IPv6 addresses are allowed. Blocking will be processed **after DNS**.
+
+This is because if a client tries to visit a hostname, like `localhost` or a domain name
+a user has pointed to 127.0.0.1, it will be resolved into `127.0.0.1` or `::1`.
+Thus it will still get blocked.
\ No newline at end of file