From: Evan Hunt <each@isc.org>
Date: Thu, 26 Jul 2018 21:55:18 +0000 (-0700)
Subject: clarify documentation
X-Git-Tag: v9.13.4~137^2~1
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=cea9ff573c4ab8e286ec3a00df3595ddda7bb97d;p=thirdparty%2Fbind9.git

clarify documentation
---

diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index af15b64982a..f34ac57b6bb 100644
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -7175,11 +7175,16 @@ options {
 	      <term><command>allow-query-cache-on</command></term>
 	      <listitem>
 		<para>
-		  Specifies which local addresses can give answers
-		  from the cache.  If not specified, the default is
-		  to allow cache queries on any address,
-		  <command>localnets</command> and
-		  <command>localhost</command>.
+		  Specifies which local addresses can send answers
+		  from the cache.  If <command>allow-query-cache-on</command>
+		  is not set, then <command>allow-recursion-on</command> is
+		  used if set.  Otherwise, the default is
+		  to allow cache responses to be sent from any address.
+		  Note: Both <command>allow-query-cache</command> and
+		  <command>allow-query-cache-on</command> must be
+		  satisfied before a cache response can be sent;
+		  a client that is blocked by one cannot be allowed
+		  by the other.
 		</para>
 	      </listitem>
 	    </varlistentry>
@@ -7205,8 +7210,17 @@ options {
 	      <listitem>
 		<para>
 		  Specifies which local addresses can accept recursive
-		  queries.  If not specified, the default is to allow
-		  recursive queries on all addresses.
+		  queries.  If <command>allow-recursion-on</command>
+		  is not set, then <command>allow-query-cache-on</command>
+		  is used if set; otherwise, the default is to allow
+		  recursive queries on all addresses: Any client permitted
+		  to send recursive queries can send them to any address
+		  on which <command>named</command> is listening.
+		  Note: Both <command>allow-recursion</command> and
+		  <command>allow-recursion-on</command> must be
+		  satisfied before recursion is allowed;
+		  a client that is blocked by one cannot be allowed
+		  by the other.
 		</para>
 	      </listitem>
 	    </varlistentry>