document mask negation

diff --git a/docs/markdown/recursor/scripting.md b/docs/markdown/recursor/scripting.md
index 1f8df6655bc59b5ef69ee69806ddbb9ad47a26bc..086f7f1c124bbb8dc6ff80085908c0d2c6f5eee6 100644 (file)
--- a/docs/markdown/recursor/scripting.md
+++ b/docs/markdown/recursor/scripting.md
@@ -268,6 +268,8 @@ if nmg:match(dq.remoteaddr) then
 end
 ```
 
+Prefixing a mask with `!` excludes that mask from matching.
+
 ### IP Addresses
 We move IP addresses around in native format, called ComboAddress within PowerDNS.
 ComboAddresses can be IPv4 or IPv6, and unless you want to know, you don't need

diff --git a/pdns/README-dnsdist.md b/pdns/README-dnsdist.md
index 7361650755a48954934108cfb582299d860c7a49..031d8bcadc591a0c790f3953cced13ff01a172a8 100644 (file)
--- a/pdns/README-dnsdist.md
+++ b/pdns/README-dnsdist.md
@@ -1507,7 +1507,7 @@ instantiate a server with additional parameters
         * member `setCD(bool)`: set checking disabled flag
     * NetmaskGroup related
         * function `newNMG()`: returns a NetmaskGroup
-        * member `addMask(mask)`: adds `mask` to the NetmaskGroup
+        * member `addMask(mask)`: adds `mask` to the NetmaskGroup. Prefix with `!` to exclude this mask from matching.
         * member `match(ComboAddress)`: checks if ComboAddress is matched by this NetmaskGroup
         * member `clear()`: clears the NetmaskGroup
         * member `size()`: returns number of netmasks in this NetmaskGroup