it doesn't, no configuration is read).
.PP
The configuration file has a simple line-based format. A line is
-ignored if it consists only of whitespace, or if its first whitespace
-character is
+ignored if it consists only of whitespace, or if its first
+non-whitespace character is
.RB ` # '.
Otherwise, the first whitespace-delimited word is a keyword and the
remainder of the line is a value. The following keywords are
can also be used to control which ports are assigned automatically.
.TP
.BI "realbind " acl-entry
-Add an entry to the
+Add a comma-separated list of entries to the
.B realbind
-access control list (ACL). When a program attempts to
+access control list (ACL). (See below for the format of an ACL entry.)
+When a program attempts to
.BR bind (2)
a socket to an address, the
.B realbind
rules), though this may change later.
.TP
.BI "realconnect " acl-entry
-Add an entry to the
+Add a comma-separated list of entries to the
.B realconnect
-access control list (ACL). When a program attempts to
+access control list (ACL). (See below for the format of an ACL entry.)
+When a program attempts to
.BR connect (2)
a socket to an address, or to contact another socket using
.BR sendto (2)
are also put at the end (before the
.B _AFTER
rules), though this may change later.
+.IP
+(Aside: An attempt to connect to a remote host may not be a hopeless failure,
+even if a real IP socket is denied:
+.B noip
+deliberately makes no attempt to check that addresses being bound to
+sockets correspond to locally available addresses; and besides, sockets
+can be introduced into the directory by other programs simulating remote
+servers.)
.TP
.BI "impbind " bind-rule
-Add an entry to the implicit-bind rule list. When a program attempts to
-.BR connect (2)
-a socket without binding its local address first,
+Add a comma-separated list of entries to the implicit-bind rule list.
+When a program attempts to transmit from a socket \(en e.g., with
+.BR connect (2),
+.BR sendto (2), or
+.BR sendmsg (2)
+\(en without binding its local address first,
.B noip
consults this list to decide on the correct local address to assign.
Each entry in the list has the form
rules), though this may change later.
.RE
.PP
-(Aside: An attempt to connect to a remote host may not be a hopeless failure,
-even if a real IP socket is denied:
-.B noip
-deliberately makes no attempt to check that addresses being bound to
-sockets correspond to locally available addresses; and besides, sockets
-can be introduced into the directory by other programs simulating remote
-servers.)
-.PP
An
.I acl-entry
is a comma-separated list of entries of the form: