From 0a0f40f7a17eccada8db400733ef15609fc5a33c Mon Sep 17 00:00:00 2001
From: shimataro <shimataro@zelkova.cc>
Date: Sun, 26 Jan 2020 17:33:07 +0900
Subject: [PATCH] * update FAQ

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 825868e..713ddc4 100644
--- a/README.md
+++ b/README.md
@@ -113,6 +113,9 @@ It has some advantages over other methods:
 * SCP is [deprecated by OpenSSH](https://www.openssh.com/txt/release-8.0) due to outdated and inflexible protocol.
 * Using bastion is more secure because:
     * it is not necessarily to expose SSH port on servers to public.
+        * Address filtering is less effective.
+        * Because Azure address range is [very wide](https://help.github.com/en/actions/automating-your-workflow-with-github-actions/virtual-environments-for-github-hosted-runners#ip-addresses-of-github-hosted-runners).
+        * And will be updated continuously.
     * it requires to shutdown only bastion when security incident ―e.g., private key leaked, GitHub jacked― occurs.
 
 ## License