From 1e8f2c7e9d9edbc7c95412f9b8b0794bb4b687c4 Mon Sep 17 00:00:00 2001 From: Otto Moerbeek Date: Fri, 6 May 2022 11:54:23 +0200 Subject: [PATCH] Document meaning of empty allow-from (cherry picked from commit a75c8e8019462827dae4599b6a24ef7a0645c30c) --- pdns/recursordist/docs/settings.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/pdns/recursordist/docs/settings.rst b/pdns/recursordist/docs/settings.rst index 0bb4de78d7..0aa80cfda3 100644 --- a/pdns/recursordist/docs/settings.rst +++ b/pdns/recursordist/docs/settings.rst @@ -42,6 +42,7 @@ To use this, DNSSEC processing or validation must be enabled by setting `dnssec` Netmasks (both IPv4 and IPv6) that are allowed to use the server. The default allows access only from :rfc:`1918` private IP addresses. +An empty value means no checking is done, all clients are allowed. Due to the aggressive nature of the internet these days, it is highly recommended to not open up the recursor for the entire internet. Questions from IP addresses not listed here are ignored and do not get an answer. -- 2.47.2