From 2893059be8d427c787c8a2dbac4d88320223340a Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Sun, 9 Dec 2018 21:46:00 +0100
Subject: T1091: extend DNS forwarding/DNSSEC completion help text

(cherry picked from commit f968d0846abc416c0eac51aeff55551f9df2dea0)
---
 interface-definitions/dns-forwarding.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/interface-definitions/dns-forwarding.xml b/interface-definitions/dns-forwarding.xml
index eda31f029..88af5f4f9 100644
--- a/interface-definitions/dns-forwarding.xml
+++ b/interface-definitions/dns-forwarding.xml
@@ -40,23 +40,23 @@
                   </completionHelp>
                   <valueHelp>
                     <format>off</format>
-                    <description/>
+                    <description>No DNSSEC processing whatsoever!</description>
                   </valueHelp>
                   <valueHelp>
                     <format>process-no-validate</format>
-                    <description/>
+                    <description>Respond with DNSSEC records to clients that ask for it. Don't do any validation.</description>
                   </valueHelp>
                   <valueHelp>
                     <format>process</format>
-                    <description/>
+                    <description>Respond with DNSSEC records to clients that ask for it. Validation for clients that request it.</description>
                   </valueHelp>
                   <valueHelp>
                     <format>log-fail</format>
-                    <description/>
+                    <description>Similar behaviour to process, but validate RRSIGs on responses and log bogus responses.</description>
                   </valueHelp>
                   <valueHelp>
                     <format>validate</format>
-                    <description/>
+                    <description>Full blown DNSSEC validation. Send SERVFAIL to clients on bogus responses.</description>
                   </valueHelp>
                   <constraint>
                     <regex>(off|process-no-validate|process|log-fail|validate)</regex>
-- 
cgit v1.2.3