Briefly mention NAT/conference cloaks

diff --git a/content/kb/general/cloaks.md b/content/kb/general/cloaks.md
index ddcf8685e77ca4a09604a20aed4a728a738a60ae..e50ee9594f77be146cb0435026825f0b37fbe012 100755 (executable)
--- a/content/kb/general/cloaks.md
+++ b/content/kb/general/cloaks.md
@@ -36,6 +36,11 @@ webchat, or KiwiIRC, or some bouncer/shell providers) then you will receive an
 automatic gateway cloak - for instance `gateway/web/freenode/ip.1.2.3.4` - these
 gateway cloaks override unaffiliated cloaks, but do not override project cloaks.
 
+There are also gateway cloaks which may denote that the host the user is coming
+from is recognised as a large-scale NAT gateway (where the public IP is being
+shared by many individual customers behind it) or conferences, where many users
+are at one location temporarily.
+
 
 Cloaks do not effectively hide your IP
 ======================================