diff --git a/usr.sbin/inetd/inetd.conf b/usr.sbin/inetd/inetd.conf
index 7f5f6783a038..82f68be7ab5d 100644
--- a/usr.sbin/inetd/inetd.conf
+++ b/usr.sbin/inetd/inetd.conf
@@ -121,7 +121,8 @@
 #prom-sysctl	stream	tcp	nowait	nobody	/usr/sbin/prometheus_sysctl_exporter	prometheus_sysctl_exporter -dgh
 #
 # Example entry for insecure rsync server
-# This is best combined with a VTI like if_ipsec(4) or wg(4)
+# This is best combined with encrypted virtual tunnel interfaces, which can be
+# found with: apropos if_ | grep tunnel
 #rsync	stream	tcp	nowait	root	/usr/local/bin/rsyncd	rsyncd --daemon
 #
 # Let the system respond to date requests via tcpmux