auth dnsproxy: document network ought to be trusted

We are reusing the source UDP port for a very long time. Cannot have
people interfere or try to attack us then.

diff --git a/docs/settings.rst b/docs/settings.rst
index 5acfc0c4b964c6112018f3aa2b81b11fff4f4dbc..faff9de6e8eb2651b4acb1a4a29e98a943a4af24 100644 (file)
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -1541,6 +1541,8 @@ Number of receiver (listening) threads to start. See :doc:`performance`.
 
 Recursive DNS server to use for ALIAS lookups and the internal stub resolver. Only one address can be given.
 
+It is assumed that the specified recursive DNS server, and the network path to it, are trusted.
+
 Examples::
 
   resolver=127.0.0.1