- Fix unbound.conf(5) access-control description for precedence

  and default.

git-svn-id: file:///svn/unbound/trunk@3492 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 639220737f55f8c0a17279af8a8d4f590a0dca2c..d866aa580f807441132864af55fa610de3b70cf4 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -7,6 +7,8 @@
        - Fix #705: ub_ctx_set_fwd() return value mishandled on windows.
        - testbound selftest also works in non-debug mode.
        - Fix minor error in unbound.conf.5.in
+       - Fix unbound.conf(5) access-control description for precedence
+         and default.
 
 31 August 2015: Wouter
        - changed windows setup compression to be more transparent.

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
index 205b48c22577b70c334ffdd9a88965b0841b96a8..25c88fdd6b6e1570b701b52f958070fe5589e677 100644 (file)
--- a/doc/unbound.conf.5.in
+++ b/doc/unbound.conf.5.in
@@ -373,6 +373,7 @@ a daemon. Default is yes.
 The netblock is given as an IP4 or IP6 address with /size appended for a 
 classless network block. The action can be \fIdeny\fR, \fIrefuse\fR, 
 \fIallow\fR, \fIallow_snoop\fR, \fIdeny_non_local\fR or \fIrefuse_non_local\fR.
+The most specific netblock match is used, if none match \fIdeny\fR is used.
 .IP
 The action \fIdeny\fR stops queries from hosts from that netblock.
 .IP