clarify proxy/firewall bullet/section