summaryrefslogtreecommitdiffstats
path: root/modules/refuse_nord/README.rst
diff options
context:
space:
mode:
Diffstat (limited to 'modules/refuse_nord/README.rst')
-rw-r--r--modules/refuse_nord/README.rst14
1 files changed, 14 insertions, 0 deletions
diff --git a/modules/refuse_nord/README.rst b/modules/refuse_nord/README.rst
new file mode 100644
index 00000000..a328beed
--- /dev/null
+++ b/modules/refuse_nord/README.rst
@@ -0,0 +1,14 @@
+.. _mod-refuse_nord:
+
+Refuse queries without RD bit
+-----------------------------
+
+This module ensures all queries without RD (recursion desired) bit set in query
+are answered with REFUSED. This prevents snooping on the resolver's cache content.
+
+The module is loaded by default. If you'd like to disable this behavior, you can
+unload it:
+
+.. code-block:: lua
+
+ modules.unload('refuse_nord')