- In man page and example config explain that most modules have to

  be listed at the start of module-config.

git-svn-id: file:///svn/unbound/trunk@5121 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 94c6ed2d1ca25e12a03d11e98feea0b592437520..40210c995248638d98bbec41dd144e6d5926e582 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -2,6 +2,8 @@
        - Fix the error for unknown module in module-config is understandable,
          and explains it was not compiled in and where to see the list.
        - In example.conf explain where to put cachedb module in module-config.
+       - In man page and example config explain that most modules have to
+         be listed at the start of module-config.
 
 20 February 2019: Wouter
        - Fix pythonmod include and sockaddr_un ifdefs for compile on

diff --git a/doc/example.conf.in b/doc/example.conf.in
index b33aaff0fd136de97bb6aa6ffc664ca64ed18ed8..d09e5a79362e91e76c8f045ccacd6ef38b6d8ce9 100644 (file)
--- a/doc/example.conf.in
+++ b/doc/example.conf.in
@@ -475,6 +475,9 @@ server:
 
        # module configuration of the server. A string with identifiers
        # separated by spaces. Syntax: "[dns64] [validator] iterator"
+       # most modules have to be listed at the beginning of the line,
+       # except cachedb(just before iterator), and python (at the beginning,
+       # or, just before the iterator).
        # module-config: "validator iterator"
 
        # File with trusted keys, kept uptodate using RFC5011 probes,
@@ -823,6 +826,8 @@ server:
 # Python config section. To enable:
 # o use --with-pythonmodule to configure before compiling.
 # o list python in the module-config string (above) to enable.
+#   It can be at the start, it gets validated results, or just before
+#   the iterator and process before DNSSEC validation.
 # o and give a python-script to run.
 python:
        # Script file to load

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
index 98650d20751e4bede14e813da56b7e8dd9693690..3efdb9216a2f5745c5d9060f23f3cf5d93a33ae8 100644 (file)
--- a/doc/unbound.conf.5.in
+++ b/doc/unbound.conf.5.in
@@ -932,6 +932,10 @@ The ordering of the modules is important.
 You must also set trust\-anchors for validation to be useful.
 The default is "validator iterator".  When the server is built with
 EDNS client subnet support the default is "subnetcache validator iterator".
+Most modules that need to be listed here have to be listed at the beginning
+of the line.  The cachedb module has to be listed just before the iterator.
+The python module can be listed in different places, it then processes the
+output of the module it is just before.
 .TP
 .B trust\-anchor\-file: \fI<filename>
 File with trusted keys for validation. Both DS and DNSKEY entries can appear