diff --git a/user/advanced-configuration/config-files.md b/user/advanced-configuration/config-files.md
index f4cd6f69..e03dd9ed 100644
--- a/user/advanced-configuration/config-files.md
+++ b/user/advanced-configuration/config-files.md
@@ -36,7 +36,7 @@ The scripts here all run as root.
 
 -   `/rw/config/qubes-ip-change-hook` - script runs in NetVM after every external IP change and on "hardware" link status change.
 
--   In ProxyVMs (or AppVMs with `qubes-firewall` service enabled), scripts placed in the following directories will be executed in the listed order followed by `qubes-firewall-user-script` after each firewall update.
+-   In ProxyVMs (or AppVMs with `qubes-firewall` service enabled), scripts placed in the following directories will be executed in the listed order followed by `qubes-firewall-user-script` at start up.
     Good place to write custom firewall rules.
 
     ~~~