From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Wed, 24 Feb 2016 17:48:43 +0000 (+0100)
Subject: Document recursor RPZ options
X-Git-Tag: auth-4.0.0-alpha2~9^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F3445%2Fhead;p=thirdparty%2Fpdns.git

Document recursor RPZ options
---

diff --git a/docs/markdown/recursor/settings.md b/docs/markdown/recursor/settings.md
index fd51109c92..51e4b5ed7a 100644
--- a/docs/markdown/recursor/settings.md
+++ b/docs/markdown/recursor/settings.md
@@ -428,6 +428,10 @@ Settings can contain:
 * defpol = Policy.Custom, Policy.Drop, Policy.NXDOMAIN, Policy.NODATA, Policy.Truncate, Policy.NoAction
 * defcontent = CNAME field to return in case of defpol=Policy.Custom
 * defttl = the TTL of the CNAME field to be synthesized
+* tsigname = the name of the TSIG key to authenticate to the server (also set tsigalgo, tsigsecret)
+* tsigalgo = the name of the TSIG algorithm (like 'hmac-md5') used
+* tsigsecret = base64 encoded TSIG secret
+* refresh = an integer describing the interval between checks for updates. By default, the RPZ zone's default is used
 
 If no settings are included, the RPZ is taken literally with no overrides applied.