arm: add why when to set 'require-server-cookie yes;'

(cherry picked from commit c5453ea3283d4326116955a24cc0cd18397a5ebb)

diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 69f66d50780087a2c94ccfcf89700ad857790791..d5af99f378d8b56f66fa8ec21ff505108e83c972 100644 (file)
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -6183,6 +6183,12 @@ options {
                  server cookie.
                  The default is <userinput>no</userinput>.
                </para>
+               <para>
+                 Set this to <userinput>yes</userinput> to test that DNS
+                 COOKIE clients correctly handle BADCOOKIE or if you are
+                 getting a lot of forged DNS requests with DNS COOKIES
+                 present.
+               </para>
              </listitem>
            </varlistentry>