update named-checkzone manpage for SPF changes

diff --git a/bin/check/named-checkzone.8 b/bin/check/named-checkzone.8
index 847cdb7133c2fb167242a6afa8e7fb266881e0a6..d47eee00544d19ea84f7687f58fdc4a37addb190 100644 (file)
--- a/bin/check/named-checkzone.8
+++ b/bin/check/named-checkzone.8
@@ -251,7 +251,7 @@ so that include directives in the configuration file are processed as if run by
 .PP
 \-T \fImode\fR
 .RS 4
-Check if Sender Policy Framework records (TXT and SPF) both exist or both don't exist. A warning is issued if they don't match. Possible modes are
+Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF-formatted TXT record is not also present. Possible modes are
 \fB"warn"\fR
 (default),
 \fB"ignore"\fR.

diff --git a/bin/check/named-checkzone.docbook b/bin/check/named-checkzone.docbook
index 909a2e259bbd0ab3af36d9c2074aa0e2423d938f..f1590b55474aa5ff6c2b289f36921445e658cab5 100644 (file)
--- a/bin/check/named-checkzone.docbook
+++ b/bin/check/named-checkzone.docbook
@@ -408,10 +408,10 @@
        <term>-T <replaceable class="parameter">mode</replaceable></term>
        <listitem>
          <para>
-           Check if Sender Policy Framework records (TXT and SPF)
-           both exist or both don't exist.  A warning is issued
-           if they don't match.  Possible modes are
-           <command>"warn"</command> (default), <command>"ignore"</command>.
+           Check if Sender Policy Framework (SPF) records exist
+           and issues a warning if an SPF-formatted TXT record is
+           not also present.  Possible modes are <command>"warn"</command>
+           (default), <command>"ignore"</command>.
          </para>
        </listitem>
       </varlistentry>

diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 432a4dc6563738c9007ee06f7e949b2cba906834..7a9825bd96b028dae9be00861d936489f1584832 100644 (file)
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -2639,8 +2639,8 @@ integrity_checks(dns_zone_t *zone, dns_db_t *db) {
 
  checkspf:
                /*
-                * Check if there is a type TXT spf record without a type SPF
-                * RRset being present.
+                * Check if there is a type SPF record without an
+                * SPF-formatted type TXT record also being present.
                 */
                if (!DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKSPF))
                        goto next;