add comment about routing not being able to use the IP for filtering