summaryrefslogtreecommitdiff
path: root/docs/services/dns-forwarding.rst
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2019-12-28 22:59:58 +0100
committerChristian Poessinger <christian@poessinger.com>2019-12-28 23:00:00 +0100
commitef0b747f39b9187bc631442396d2e720f952194f (patch)
tree9fbb8eb1e56c368e59ad88bd564f6a74ccdabffa /docs/services/dns-forwarding.rst
parent499f536d5b6b5f5bc45c649abdab5c007cda30a6 (diff)
downloadvyos-documentation-ef0b747f39b9187bc631442396d2e720f952194f.tar.gz
vyos-documentation-ef0b747f39b9187bc631442396d2e720f952194f.zip
dns-forwarding: minor fixes
- remove redundant "be" - proper indent note block
Diffstat (limited to 'docs/services/dns-forwarding.rst')
-rw-r--r--docs/services/dns-forwarding.rst9
1 files changed, 5 insertions, 4 deletions
diff --git a/docs/services/dns-forwarding.rst b/docs/services/dns-forwarding.rst
index fb996709..a529f6a7 100644
--- a/docs/services/dns-forwarding.rst
+++ b/docs/services/dns-forwarding.rst
@@ -29,9 +29,10 @@ avoid to be tracked by the provider of your upstream DNS server.
.. cfgcmd:: set service dns forwarding domain <domain-name> server <address>
Forward received queries for a particular domain (specified via `domain-name`)
- to a given name-server. Multiple nameservers can be specified.
+ to a given name-server. Multiple nameservers can be specified. You can use
+ this feature for a DNS split-horizon configuration.
-.. note:: This also works for reverse-lookup zones e.g. ``18.172.in-addr.arpa``.
+ .. note:: This also works for reverse-lookup zones (``18.172.in-addr.arpa``).
.. cfgcmd:: set service dns forwarding allow-from <network>
@@ -71,8 +72,8 @@ avoid to be tracked by the provider of your upstream DNS server.
as with process.
* **validate** The highest mode of DNSSEC processing. In this mode, all
- queries will be be validated and will be answered with a SERVFAIL in case
- of bogus data, regardless of the client's request.
+ queries will be validated and will be answered with a SERVFAIL in case of
+ bogus data, regardless of the client's request.
.. note:: The famous UNIX/Linux ``dig`` tool sets the AD-bit in the query.
This might lead to unexpected query results when testing. Set ``+noad``