summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
Diffstat (limited to 'docs')
-rw-r--r--docs/configuration/service/dns.rst15
1 files changed, 9 insertions, 6 deletions
diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst
index dff24361..4391b453 100644
--- a/docs/configuration/service/dns.rst
+++ b/docs/configuration/service/dns.rst
@@ -94,16 +94,19 @@ avoid being tracked by the provider of your upstream DNS server.
Maximum number of DNS cache entries. 1 million per CPU core will generally
suffice for most installations.
-.. cfgcmd:: set service dns forwarding negative-ttl
+ This defaults to 10000.
+
+.. cfgcmd:: set service dns forwarding negative-ttl <0-7200>
A query for which there is authoritatively no answer is cached to quickly
deny a record's existence later on, without putting a heavy load on the
remote server. In practice, caches can become saturated with hundreds of
- thousands of hosts which are tried only once. This setting, which defaults
- to 3600 seconds, puts a maximum on the amount of time negative entries are
- cached.
+ thousands of hosts which are tried only once.
+
+ This setting, which defaults to 3600 seconds, puts a maximum on the amount
+ of time negative entries are cached.
-.. cfgcmd:: set service dns forwarding listen-address
+.. cfgcmd:: set service dns forwarding listen-address <address>
The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder
will listen on this address for incoming connections.
@@ -111,7 +114,7 @@ avoid being tracked by the provider of your upstream DNS server.
.. cfgcmd:: set service dns forwarding no-serve-rfc1918
This makes the server authoritatively not aware of: 10.in-addr.arpa,
- 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream
+ 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream
DNS server(s) to be used for reverse lookups of these zones.
Example