clarify the difficulty of transparent proxying

README.md

@@ -36,6 +36,18 @@ Configuration
 
 Please refer to the [configuration guide](doc/config.md).
 
+Transparent proxying allows the target server to see the
+original client IP address, i.e. `sslh` becomes invisible.
+This makes it easier to use the server's logs, and potential
+IP-based banning ability.
+
+Configuration of transparent proxying is highly dependent on
+your network environment and infrastructure setup. There is
+no known generic approach, and if you do not find directions
+for your exact setup, you will probably need an extensive
+knowledge of network management and iptables setup".
+
+It is described in its own [document](tproxy.md).
 
 
 Docker image

doc/config.md

@@ -99,12 +99,8 @@ Then you can run sslh-select as an unprivileged user, e.g.:
 Transparent proxy support
 -------------------------
 
-Transparent proxying allows the target server to see the
+Transparent proxying is described in its own
-original client IP address, i.e. `sslh` becomes invisible.
+[document](tproxy.md).
-This makes it easier to use the server's logs, and potential
-IP-based banning ability.
-
-Set up can get complicated, so it has its own [document](tproxy.md).
 
 Systemd Socket Activation
 -------------------------