From d09abd509c9b9a822c8f90b1c92168d01acf49a4 Mon Sep 17 00:00:00 2001 From: chariri Date: Fri, 11 Sep 2026 23:52:08 +0900 Subject: docs: T8045: document dont-query (#2211) * docs: T8045: document dont-query --------- Co-authored-by: Daniil Baturin --- docs/configuration/service/dns.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) (limited to 'docs') diff --git a/docs/configuration/service/dns.md b/docs/configuration/service/dns.md index 8e98a43a..a18e47e6 100644 --- a/docs/configuration/service/dns.md +++ b/docs/configuration/service/dns.md @@ -180,6 +180,28 @@ set service dns forwarding source-address 192.0.2.1 set service dns forwarding source-address 2001:db8::1 ``` +```{cfgcmd} set service dns forwarding dont-query \
+ +**Add an IPv4 or IPv6 address or prefix to the recursor's exclusion list +of servers to query.** + +Prefix a value with `!` to make it an exception to that list. + +The recursor selects the most specific matching prefix. When positive and +negative entries use the same prefix, the entry configured last takes +precedence. + +The list applies to addresses discovered during recursive resolution +(e.g., NS records). +The recursor still sends queries to explicitly configured upstream DNS servers. +``` + +Example: + +```none +set service dns forwarding dont-query !127.0.0.0/8 +``` + ```{cfgcmd} set service dns forwarding no-serve-rfc1918 **Disable authoritative answering of queries for `10.in-addr.arpa`, -- cgit v1.2.3