From: Mark Andrews <marka@isc.org>
Date: Thu, 24 Oct 2019 23:06:56 +0000 (+1100)
Subject: arm: add why when to set 'require-server-cookie yes;'
X-Git-Tag: v9.15.6~41^2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c5453ea3283d4326116955a24cc0cd18397a5ebb;p=thirdparty%2Fbind9.git

arm: add why when to set 'require-server-cookie yes;'
---

diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 3051411d742..c6f6ec18356 100644
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -6011,6 +6011,12 @@ options {
 		  server cookie.
 		  The default is <userinput>no</userinput>.
 		</para>
+		<para>
+		  Set this to <userinput>yes</userinput> to test that DNS
+		  COOKIE clients correctly handle BADCOOKIE or if you are
+		  getting a lot of forged DNS requests with DNS COOKIES
+		  present.
+		</para>
 	      </listitem>
 	    </varlistentry>