diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/configuration/service/dns.md | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/docs/configuration/service/dns.md b/docs/configuration/service/dns.md index a18e47e6..75c01f72 100644 --- a/docs/configuration/service/dns.md +++ b/docs/configuration/service/dns.md @@ -451,6 +451,33 @@ set service dns forwarding options edns-subnet-allow-list example.com set service dns forwarding options edns-subnet-allow-list 192.0.2.0/24 ``` +```{cfgcmd} set service dns forwarding options security-status-poll-domain \<domain-name\> + +**Configure the domain used by the PowerDNS recursor to periodically +poll for known vulnerabilities in the running version.** + +Disabled by default, since VyOS ships its own patched/backported +package that is not updated in-place, making the poll result +meaningless. Only takes effect once a domain is configured; delete +the option to disable polling again. + +`secpoll.powerdns.com` is PowerDNS' own security-status poll domain, +not a VyOS default - set it explicitly to use it, or point this at a +custom domain operated by your own organization. +``` + +Example: + +```none +set service dns forwarding options security-status-poll-domain secpoll.powerdns.com +``` + +To disable polling again: + +```none +delete service dns forwarding options security-status-poll-domain +``` + ### Per-domain forwarding ```{cfgcmd} set service dns forwarding domain \<domain-name\> name-server \<address\> |