diff --git a/CHANGELOG b/CHANGELOG
new file mode 100644
index 0000000000000000000000000000000000000000..dcf0f5c4d0d3c2332e26255aa7bae163e09c2f47
--- /dev/null
+++ b/CHANGELOG
@@ -0,0 +1,7 @@
+0.21.6
+======
+
+- A new and shiny gateway selector!
+- Allow to select obfs4 gateways (bridges)
+- Ability to define explicit allowed addresses for local networks.
+
diff --git a/docs/firewall.rst b/docs/firewall.rst
new file mode 100644
index 0000000000000000000000000000000000000000..0ebd3582d52264399c675ed3803118c102b26330
--- /dev/null
+++ b/docs/firewall.rst
@@ -0,0 +1,9 @@
+firewall
+========
+
+If you want to explicitely define allowed ips in private ranges, please use the files::
+
+  /etc/bitmask/ipv4.allow
+  /etc/bitmask/ipv6.allow
+
+With one ip per line.