diff options
| author | Daniil Baturin <daniil@baturin.org> | 2018-12-16 15:49:52 +0100 |
|---|---|---|
| committer | Daniil Baturin <daniil@baturin.org> | 2018-12-16 15:49:52 +0100 |
| commit | 63850687f0fe5bc07281fb1a22d222ba2f2dd60f (patch) | |
| tree | 01433c9fa1ec51448c6a9d3097952a838d7bed2c /interface-definitions/dns-forwarding.xml | |
| parent | 26e1a5c2da4f78a94655fd9434ad0cc604735dca (diff) | |
| parent | e734b846ec53f9950da562ea27676f63ac5c1599 (diff) | |
| download | vyos-1x-63850687f0fe5bc07281fb1a22d222ba2f2dd60f.tar.gz vyos-1x-63850687f0fe5bc07281fb1a22d222ba2f2dd60f.zip | |
Merge branch 'current' into crux
Diffstat (limited to 'interface-definitions/dns-forwarding.xml')
| -rw-r--r-- | interface-definitions/dns-forwarding.xml | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/interface-definitions/dns-forwarding.xml b/interface-definitions/dns-forwarding.xml index e3d33e8cc..88af5f4f9 100644 --- a/interface-definitions/dns-forwarding.xml +++ b/interface-definitions/dns-forwarding.xml @@ -35,25 +35,28 @@ <leafNode name="dnssec"> <properties> <help>DNSSEC mode</help> + <completionHelp> + <list>off process-no-validate process log-fail validate</list> + </completionHelp> <valueHelp> <format>off</format> - <description/> + <description>No DNSSEC processing whatsoever!</description> </valueHelp> <valueHelp> <format>process-no-validate</format> - <description/> + <description>Respond with DNSSEC records to clients that ask for it. Don't do any validation.</description> </valueHelp> <valueHelp> <format>process</format> - <description/> + <description>Respond with DNSSEC records to clients that ask for it. Validation for clients that request it.</description> </valueHelp> <valueHelp> <format>log-fail</format> - <description/> + <description>Similar behaviour to process, but validate RRSIGs on responses and log bogus responses.</description> </valueHelp> <valueHelp> <format>validate</format> - <description/> + <description>Full blown DNSSEC validation. Send SERVFAIL to clients on bogus responses.</description> </valueHelp> <constraint> <regex>(off|process-no-validate|process|log-fail|validate)</regex> |