diff --git a/retroshare-gui/src/gui/feeds/SecurityIpItem.cpp b/retroshare-gui/src/gui/feeds/SecurityIpItem.cpp
index 319e751b2..9d93292d2 100644
--- a/retroshare-gui/src/gui/feeds/SecurityIpItem.cpp
+++ b/retroshare-gui/src/gui/feeds/SecurityIpItem.cpp
@@ -152,8 +152,10 @@ void SecurityIpItem::updateItem()
 		case RS_FEED_ITEM_SEC_WRONG_EXTERNAL_IP_REPORTED:
 			ui->titleLabel->setText(tr("Wrong external ip address reported"));
 			ui->ipAddr->setText(QString::fromStdString(mIpAddr));
-			ui->ipAddrReported->setText(QString::fromStdString(mIpAddrReported));
-			break;
+            ui->ipAddr->setToolTip(tr("<p>This is the external IP your Retroshare node thinks it is using.</p>")) ;
+            ui->ipAddrReported->setText(QString::fromStdString(mIpAddrReported));
+            ui->ipAddrReported->setToolTip(tr("<p>This is the IP your friend claims it is connected to. If you changed IPs this is just a false warning. If not, that means your connection to this friend is forwarded by an intermediate peer, which would be suspicious.</p>")) ;
+            break;
 		default:
 			std::cerr << "SecurityIpItem::updateItem() Wrong type" << std::endl;
 		}