diff --git a/route/access_rules.go b/route/access_rules.go
index 19e9ffe84..63dd64a1c 100644
--- a/route/access_rules.go
+++ b/route/access_rules.go
@@ -68,7 +68,7 @@ func (t *Target) AccessDeniedHTTP(r *http.Request) bool {
 
 // AccessDeniedTCP checks rules on the target for TCP proxy routes.
 func (t *Target) AccessDeniedTCP(c net.Conn) bool {
-	// Calling RemoteAddr on a proxy-protocol enabled connection.
+	// Calling RemoteAddr on a proxy-protocol enabled connection may block.
 	// Therefore we explicitly check and bail out early if there are no
 	// rules defined for the target.
 	// See https://github.com/fabiolb/fabio/issues/524 for background.