From bb7308313267dcb1e14c5a2e3fcd5d7deb6e5c29 Mon Sep 17 00:00:00 2001 From: Wouter Wijngaards Date: Fri, 27 Jul 2007 07:22:30 +0000 Subject: [PATCH] doc update git-svn-id: file:///svn/unbound/trunk@460 be551aaa-1e26-0410-a405-d3ace91eadb9 --- doc/Changelog | 3 ++- doc/unbound.conf.5 | 26 +++++++++++++++++++------- 2 files changed, 21 insertions(+), 8 deletions(-) diff --git a/doc/Changelog b/doc/Changelog index d9f428142..2f3f278c8 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,5 +1,6 @@ 27 July 2007: Wouter - - removed useless -C debug option. I did not work. + - removed useless -C debug option. It did not work. + - text edit of documentation. 26 July 2007: Wouter - cycle detection, for query state dependencies. Will attempt to diff --git a/doc/unbound.conf.5 b/doc/unbound.conf.5 index 83c16b1d8..5c8245075 100644 --- a/doc/unbound.conf.5 +++ b/doc/unbound.conf.5 @@ -128,10 +128,12 @@ Enable or disable whether TCP queries are answered. Default is yes. If given a chroot is done to the given directory. The default is none (""). .It \fBusername:\fR If given, after binding the port the user privileges are dropped. Default is -not to change user, username: "". If this user is not capable of binding the +not to change user, username: "". + +If this user is not capable of binding the port, reloads (by signal HUP) will still retain the opened ports. If you change the port number in the config file, and that new port number -requires privileges, then a restart is needed. +requires privileges, then a reload will fail; a restart is needed. .It \fBdirectory:\fR Sets the working directory for the program. .It \fBlogfile:\fR @@ -155,11 +157,15 @@ version is returned. .It \fBtarget-fetch-policy:\fR <"list of numbers"> Set the target fetch policy used by unbound to determine if it should fetch nameserver target addresses opportunistically. The policy is described per -dependency depth. The number of values determines the maximum dependency depth -that unbound will pursue in answering a query. +dependency depth. + +The number of values determines the maximum dependency depth +that unbound will pursue in answering a query. A value of -1 means to fetch all targets opportunistically for that dependency depth. A value of 0 means to fetch on demand only. A positive value fetches -that many targets opportunistically. Enclose the list between quotes (""). +that many targets opportunistically. + +Enclose the list between quotes ("") and put spaces between numbers. The default is "3 2 1 0 0". Setting all zeroes, "0 0 0 0 0" gives behaviour closer to that of BIND 9, while setting "-1 -1 -1 -1 -1" gives behaviour rumoured to be closer to that of BIND 8. @@ -175,8 +181,8 @@ payload is very large. Will trust glue only if it is within the servers authority. Default is on. .It \fBdo-not-query-address:\fR Do not query the given IP address. Can be IP4 or IP6. By default the -DNS port is blocked for that address. Appending "@portnumber" will block -other port numbers. +DNS port is blocked for that address. Appending the character '@' and then +the portnumber will block other port numbers. .El .Ss Stub Zone Options @@ -214,8 +220,14 @@ To use a nondefault port for DNS communication append '@' with the port number. .Sh FILES .Bl -tag -width indent +.It Pa /etc/unbound +default unbound working directory .It Pa unbound.conf unbound configuration file. +.It Pa unbound.pid +default unbound pidfile with process ID of the running daemon. +.It Pa unbound.log +unbound log file. .El .Sh SEE ALSO .Xr unbound 8 -- 2.47.2