diff --git a/Docker.md b/Docker.md
index b4fdc2e..62e3588 100644
--- a/Docker.md
+++ b/Docker.md
@@ -40,6 +40,11 @@ ExecStop=/usr/bin/docker stop radarr
 WantedBy=multi-user.target
 ```
 
+## Firewall
+An important network and firewall aspect to make note of is the difference between Docker's bridged and host network mode. The default is bridged, which then uses the `-p` option to open up a port to *everything*. If the host option is used instead, it'll obey any of your firewall rules. This distinction is most notable *outside* of a typical LAN environment, like with a VPS, dedicated server or AWS instance.
+
+To change between options, just remove `-p 7878:7878 \` and replace with `--network host \`.
+
 ##Set permissions
 ```bash
 sudo chmod 644 /etc/systemd/system/docker-radarr.service