rec: Document behaviour of dont-query with forward-zones.

In testing, it appears to me that setting a zone in forward-zones to query
for an address limited by dont-query is not stopped by it.

diff --git a/docs/markdown/recursor/settings.md b/docs/markdown/recursor/settings.md
index 159a307ca749c474d23cd38766cd984a88d34f8d..3c9b8771df7e34b2308fe3ba038431e05a3c7392 100644 (file)
--- a/docs/markdown/recursor/settings.md
+++ b/docs/markdown/recursor/settings.md
@@ -241,6 +241,11 @@ your network, and may even be a security risk. Therefore, since version 3.1.5,
 the PowerDNS recursor by default does not query private space IP addresses.
 This setting can be used to expand or reduce the limitations.
 
+Queries to addresses for zones as configured in any of the settings
+[`forward-zones`](#forward-zones), [`forward-zones-file`](#forward-zones-file)
+or [`forward-zones-recurse`](#forward-zones-recurse) are performed regardless
+of these limitations.
+
 ## `ecs-ipv4-bits`
 * Integer
 * Default: 24