2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00

Merge branch '3335-confusing-parental-source-documentation' into 'main'

Remove confusing parental-source line

Closes #3335

See merge request isc-projects/bind9!6272
This commit is contained in:
Matthijs Mekking
2022-05-11 11:17:54 +00:00

View File

@@ -5420,13 +5420,11 @@ old DNSSEC key.
The following options apply to DS queries sent to ``parental-agents``:
``parental-source``
``parental-source`` determines which local source address, and
optionally UDP port, is used to send parental DS queries. This
address must appear in the secondary server's ``parental-agents`` zone
clause. This statement sets the ``parental-source`` for all zones, but can
be overridden on a per-zone or per-view basis by including a
``parental-source`` statement within the ``zone`` or ``view`` block in the
configuration file.
``parental-source`` determines which local source address, and optionally
UDP port, is used to send parental DS queries. This statement sets the
``parental-source`` for all zones, but can be overridden on a per-zone or
per-view basis by including a ``parental-source`` statement within the
``zone`` or ``view`` block in the configuration file.
.. warning:: Specifying a single port is discouraged, as it removes a layer of
protection against spoofing errors.