diff options
| author | Christian Poessinger <christian@poessinger.com> | 2018-12-09 21:46:00 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2018-12-09 21:46:34 +0100 |
| commit | f968d0846abc416c0eac51aeff55551f9df2dea0 (patch) | |
| tree | 529ad3c36aa23d37d07a0273c994d42336fb3fbe | |
| parent | f9ad571f6d2a6238fe841f8eb1acf7daced1c7d5 (diff) | |
| download | vyos-1x-f968d0846abc416c0eac51aeff55551f9df2dea0.tar.gz vyos-1x-f968d0846abc416c0eac51aeff55551f9df2dea0.zip | |
T1091: extend DNS forwarding/DNSSEC completion help text
| -rw-r--r-- | interface-definitions/dns-forwarding.xml | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/interface-definitions/dns-forwarding.xml b/interface-definitions/dns-forwarding.xml index eda31f029..88af5f4f9 100644 --- a/interface-definitions/dns-forwarding.xml +++ b/interface-definitions/dns-forwarding.xml @@ -40,23 +40,23 @@ </completionHelp> <valueHelp> <format>off</format> - <description/> + <description>No DNSSEC processing whatsoever!</description> </valueHelp> <valueHelp> <format>process-no-validate</format> - <description/> + <description>Respond with DNSSEC records to clients that ask for it. Don't do any validation.</description> </valueHelp> <valueHelp> <format>process</format> - <description/> + <description>Respond with DNSSEC records to clients that ask for it. Validation for clients that request it.</description> </valueHelp> <valueHelp> <format>log-fail</format> - <description/> + <description>Similar behaviour to process, but validate RRSIGs on responses and log bogus responses.</description> </valueHelp> <valueHelp> <format>validate</format> - <description/> + <description>Full blown DNSSEC validation. Send SERVFAIL to clients on bogus responses.</description> </valueHelp> <constraint> <regex>(off|process-no-validate|process|log-fail|validate)</regex> |