- Fix documentation for access-control in the unbound.conf man page.

diff --git a/doc/Changelog b/doc/Changelog
index 2a8a598aa3fa917615ec8033bbcbecf504700188..0d290565bc524faccb9ab1fcfe8eda61c0ce81b6 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+8 February 2024: Wouter
+       - Fix documentation for access-control in the unbound.conf man page.
+
 7 February 2024: Yorgos
        - Fix #1006: Can't find protobuf-c package since #999.
 

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
index 903bd27d5b8d47978067cd866026ee40c04d5e93..837e512fedfb89b4fdb0a65039d791d7596e67cd 100644 (file)
--- a/doc/unbound.conf.5.in
+++ b/doc/unbound.conf.5.in
@@ -699,6 +699,12 @@ When at the limit, further connections are accepted but closed immediately.
 This option is experimental at this time.
 .TP
 .B access\-control: \fI<IP netblock> <action>
+Specify treatment of incoming queries from their originating IP address.
+Queries can be allowed to have access to this server that gives DNS
+answers, or refused, with other actions possible. The IP address range
+can be specified as a netblock, it is possible to give the statement
+several times in order to specify the treatment of different netblocks.
+.IP
 The netblock is given as an IP4 or IP6 address with /size appended for a
 classless network block. The action can be \fIdeny\fR, \fIrefuse\fR,
 \fIallow\fR, \fIallow_setrd\fR, \fIallow_snoop\fR, \fIallow_cookie\fR,