diff options
author | Robert Göhler <github@ghlr.de> | 2020-01-04 14:12:53 +0100 |
---|---|---|
committer | Robert Göhler <github@ghlr.de> | 2020-01-04 14:12:53 +0100 |
commit | 52595595f76d85b20477b61a886a9ff09f17e604 (patch) | |
tree | b33d14410f79ee8c716f22bd765cf9722cd196cf /docs/services/dns-forwarding.rst | |
parent | 156eef177980052027db572e4b60d984626e0081 (diff) | |
parent | a4fbdcf4b01c8a1806576bcd62a6f166b5645dc6 (diff) | |
download | vyos-documentation-52595595f76d85b20477b61a886a9ff09f17e604.tar.gz vyos-documentation-52595595f76d85b20477b61a886a9ff09f17e604.zip |
Merge branch 'master' into newdirectives
Diffstat (limited to 'docs/services/dns-forwarding.rst')
-rw-r--r-- | docs/services/dns-forwarding.rst | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/docs/services/dns-forwarding.rst b/docs/services/dns-forwarding.rst index fb996709..a529f6a7 100644 --- a/docs/services/dns-forwarding.rst +++ b/docs/services/dns-forwarding.rst @@ -29,9 +29,10 @@ avoid to be tracked by the provider of your upstream DNS server. .. cfgcmd:: set service dns forwarding domain <domain-name> server <address> Forward received queries for a particular domain (specified via `domain-name`) - to a given name-server. Multiple nameservers can be specified. + to a given name-server. Multiple nameservers can be specified. You can use + this feature for a DNS split-horizon configuration. -.. note:: This also works for reverse-lookup zones e.g. ``18.172.in-addr.arpa``. + .. note:: This also works for reverse-lookup zones (``18.172.in-addr.arpa``). .. cfgcmd:: set service dns forwarding allow-from <network> @@ -71,8 +72,8 @@ avoid to be tracked by the provider of your upstream DNS server. as with process. * **validate** The highest mode of DNSSEC processing. In this mode, all - queries will be be validated and will be answered with a SERVFAIL in case - of bogus data, regardless of the client's request. + queries will be validated and will be answered with a SERVFAIL in case of + bogus data, regardless of the client's request. .. note:: The famous UNIX/Linux ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing. Set ``+noad`` |