- Note default for module-config in man page.

git-svn-id: file:///svn/unbound/trunk@5109 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 4a14c606057f75ab414a3b427ff94703fba44b47..cafe8fe1ca8d08fd92b43d9e9f18e3d92438e925 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+11 February 2019: Wouter
+       - Note default for module-config in man page.
+
 7 February 2019: Wouter
        - Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2.
        - Fix that qname minimisation does not skip a label when missing

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
index 88340b4a1deec23d520ab4db44037dbf0ad3bf6c..9cbcda406b3bcbd484d8d10ac679a3ef87bf798a 100644 (file)
--- a/doc/unbound.conf.5.in
+++ b/doc/unbound.conf.5.in
@@ -930,6 +930,8 @@ Setting this to "iterator" will result in a non\-validating server.
 Setting this to "validator iterator" will turn on DNSSEC validation.
 The ordering of the modules is important.
 You must also set trust\-anchors for validation to be useful.
+The default is "validator iterator".  When the server is built with
+EDNS client subnet support the default is "subnetcache validator iterator".
 .TP
 .B trust\-anchor\-file: \fI<filename>
 File with trusted keys for validation. Both DS and DNSKEY entries can appear