From b6a59cdcfec5fd25293d0cbd1249e1c363865170 Mon Sep 17 00:00:00 2001 From: Graham Hayes Date: Thu, 9 Jul 2015 18:18:30 +0100 Subject: [PATCH] Fix out-of-zone-additional-processing documentation Docs indicate that it defaults to "no", while it actually defaults to "yes". --- docs/markdown/authoritative/settings.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/markdown/authoritative/settings.md b/docs/markdown/authoritative/settings.md index dff03e258..767985036 100644 --- a/docs/markdown/authoritative/settings.md +++ b/docs/markdown/authoritative/settings.md @@ -507,13 +507,16 @@ or ALSO-NOTIFY metadata always receive AXFR NOTIFY. ## `out-of-zone-additional-processing` * Boolean -* Default: no +* Default: yes Do out of zone additional processing. This means that if a malicious user adds a '.com' zone to your server, it is not used for other domains and will not contaminate answers. Do not enable this setting if you run a public DNS service with untrusted users. +The docs had previously indicated that the default was "no", but the default has +been "yes" since 2005. + ## `pipebackend-abi-version` * Integer * Default: 1 -- 2.40.0