From: W.C.A. Wijngaards Date: Thu, 5 Mar 2026 11:15:54 +0000 (+0100) Subject: - Update generated man pages. X-Git-Tag: release-1.25.0rc1~62 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=1bd7c8dfeedba3087c88c75d1b58c2c58986792d;p=thirdparty%2Funbound.git - Update generated man pages. --- diff --git a/doc/Changelog b/doc/Changelog index 0230be806..2581a3cdc 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -5,6 +5,7 @@ Network Sciences and Cyberspace, Tsinghua University for the report. The private-address option is fixed to also elide SVCB and HTTPS records that match the filter. + - Update generated man pages. 4 March 2026: Yorgos - For #1411: Introduce a failing case in the rpl test so that it only diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in index 194a3c076..b8c601c79 100644 --- a/doc/unbound.conf.5.in +++ b/doc/unbound.conf.5.in @@ -2275,6 +2275,11 @@ This protects against so\-called DNS Rebinding, where a user browser is turned into a network proxy, allowing remote access through the browser to other parts of your private network. .sp +The option removes resource records of types A, AAAA, SVCB and HTTPS +that match the filter. +Inside the SVCB and HTTPS records, the svcparams of type ipv4hint +and ipv6hint are checked for matches. +.sp Some names can be allowed to contain your private addresses, by default all the \fI\%local\-data\fP that you configured is allowed to, and you can specify additional names using