diff --git a/README.md b/README.md
index 5d164ff..3c56878 100644
--- a/README.md
+++ b/README.md
@@ -49,5 +49,5 @@ First use the `ssh-keygen` command to create a private and public key pair on th
 `restrict`: this restricts all current and future forwarding options  
 `command=""`: don't allow client to send a command, set an empty forced command instead  
 `port-forwarding`: allow port forwarding  
-`permitlisten="localhost:22"`: restrict client to access ssh port on server only (default for security reasons)  
-`permitopen="localhost:22"`: restrict client to create port 22 on the server only, which will fail (default for security reasons)  
\ No newline at end of file
+`permitlisten="localhost:22"`: restrict client to create (via `ssh -R`) port 22 on the server only, which will fail (default for security reasons)  
+`permitopen="localhost:22"`: restrict client to access (via `ssh -L`) ssh port on server only (default for security reasons)  
\ No newline at end of file