diff options
| author | des <des@FreeBSD.org> | 2015-07-06 13:23:27 +0000 |
|---|---|---|
| committer | des <des@FreeBSD.org> | 2015-07-06 13:23:27 +0000 |
| commit | a060063a487e71aee85b154308b20e3c3d050c54 (patch) | |
| tree | 78e508412e7aed4056295e6af1335856834fc7e3 /contrib/unbound/doc/unbound-host.1 | |
| parent | c49abb198d367256a94da48fed297b82b5a11ad9 (diff) | |
| download | FreeBSD-src-a060063a487e71aee85b154308b20e3c3d050c54.zip FreeBSD-src-a060063a487e71aee85b154308b20e3c3d050c54.tar.gz | |
MFH (r276605, r282089): upgrade to latest Unbound
MFH (r276699, r276702, r277057): local control socket
MFH (r276599, r276612, r282087, r282088): build fixes
This brings in Unbound 1.5.3 from head. Local control sockets are now
supported and will be used by default for new installations. Existing
systems will continue to use TCP control sockets until the automated
setup script is re-run ("service local_unbound setup") and the service
restarted ("service local_unbound restart").
Approved by: re (kib)
Relnotes: yes
Diffstat (limited to 'contrib/unbound/doc/unbound-host.1')
| -rw-r--r-- | contrib/unbound/doc/unbound-host.1 | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/contrib/unbound/doc/unbound-host.1 b/contrib/unbound/doc/unbound-host.1 index 1c8c42d..bda99ce 100644 --- a/contrib/unbound/doc/unbound-host.1 +++ b/contrib/unbound/doc/unbound-host.1 @@ -1,4 +1,4 @@ -.TH "unbound\-host" "1" "Mar 12, 2014" "NLnet Labs" "unbound 1.4.22" +.TH "unbound\-host" "1" "Mar 10, 2015" "NLnet Labs" "unbound 1.5.3" .\" .\" unbound-host.1 -- unbound DNS lookup utility .\" @@ -8,13 +8,11 @@ .\" .\" .SH "NAME" -.LP .B unbound\-host \- unbound DNS lookup utility .SH "SYNOPSIS" -.LP .B unbound\-host -.RB [ \-vdhr46 ] +.RB [ \-vdhr46D ] .RB [ \-c .IR class ] .RB [ \-t @@ -29,7 +27,6 @@ .RB [ \-C .IR configfile ] .SH "DESCRIPTION" -.LP .B Unbound\-host uses the unbound validating resolver to query for the hostname and display results. With the \fB\-v\fR option it displays validation @@ -74,6 +71,10 @@ of trust that is built up from the trust anchor to the response, in order to validate the response message. Can be given as a DS or DNSKEY record. For example \-y "example.com DS 31560 5 1 1CFED84787E6E19CCF9372C1187325972FE546CD". .TP +.B \-D +Enables DNSSEC validation. Reads the root anchor from the default configured +root anchor at the default location, \fI/var/unbound/root.key\fR. +.TP .B \-f \fIkeyfile Reads keys from a file. Every line has a DS or DNSKEY record, in the format as for \-y. The zone file format, the same as dig and drill produce. @@ -98,7 +99,6 @@ Use solely the IPv4 network for sending packets. .B \-6 Use solely the IPv6 network for sending packets. .SH "EXAMPLES" -.LP Some examples of use. The keys shown below are fakes, thus a security failure is encountered. .P |
