From: Otto Moerbeek Date: Fri, 6 May 2022 09:54:23 +0000 (+0200) Subject: Document meaning of empty allow-from X-Git-Tag: auth-4.8.0-alpha0~98^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F11609%2Fhead;p=thirdparty%2Fpdns.git Document meaning of empty allow-from --- diff --git a/pdns/recursordist/docs/settings.rst b/pdns/recursordist/docs/settings.rst index e822c07d0f..781a5b30c0 100644 --- a/pdns/recursordist/docs/settings.rst +++ b/pdns/recursordist/docs/settings.rst @@ -42,6 +42,7 @@ To use this, DNSSEC processing or validation must be enabled by setting `dnssec` Netmasks (both IPv4 and IPv6) that are allowed to use the server. The default allows access only from :rfc:`1918` private IP addresses. +An empty value means no checking is done, all clients are allowed. Due to the aggressive nature of the internet these days, it is highly recommended to not open up the recursor for the entire internet. Questions from IP addresses not listed here are ignored and do not get an answer.