summaryrefslogtreecommitdiff
path: root/interface-definitions/dns-forwarding.xml
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2018-12-09 21:46:00 +0100
committerChristian Poessinger <christian@poessinger.com>2018-12-09 21:46:34 +0100
commitf968d0846abc416c0eac51aeff55551f9df2dea0 (patch)
tree529ad3c36aa23d37d07a0273c994d42336fb3fbe /interface-definitions/dns-forwarding.xml
parentf9ad571f6d2a6238fe841f8eb1acf7daced1c7d5 (diff)
downloadvyos-1x-f968d0846abc416c0eac51aeff55551f9df2dea0.tar.gz
vyos-1x-f968d0846abc416c0eac51aeff55551f9df2dea0.zip
T1091: extend DNS forwarding/DNSSEC completion help text
Diffstat (limited to 'interface-definitions/dns-forwarding.xml')
-rw-r--r--interface-definitions/dns-forwarding.xml10
1 files changed, 5 insertions, 5 deletions
diff --git a/interface-definitions/dns-forwarding.xml b/interface-definitions/dns-forwarding.xml
index eda31f029..88af5f4f9 100644
--- a/interface-definitions/dns-forwarding.xml
+++ b/interface-definitions/dns-forwarding.xml
@@ -40,23 +40,23 @@
</completionHelp>
<valueHelp>
<format>off</format>
- <description/>
+ <description>No DNSSEC processing whatsoever!</description>
</valueHelp>
<valueHelp>
<format>process-no-validate</format>
- <description/>
+ <description>Respond with DNSSEC records to clients that ask for it. Don't do any validation.</description>
</valueHelp>
<valueHelp>
<format>process</format>
- <description/>
+ <description>Respond with DNSSEC records to clients that ask for it. Validation for clients that request it.</description>
</valueHelp>
<valueHelp>
<format>log-fail</format>
- <description/>
+ <description>Similar behaviour to process, but validate RRSIGs on responses and log bogus responses.</description>
</valueHelp>
<valueHelp>
<format>validate</format>
- <description/>
+ <description>Full blown DNSSEC validation. Send SERVFAIL to clients on bogus responses.</description>
</valueHelp>
<constraint>
<regex>(off|process-no-validate|process|log-fail|validate)</regex>