summaryrefslogtreecommitdiffstats
path: root/modules/refuse_nord/README.rst
diff options
context:
space:
mode:
Diffstat (limited to 'modules/refuse_nord/README.rst')
-rw-r--r--modules/refuse_nord/README.rst16
1 files changed, 16 insertions, 0 deletions
diff --git a/modules/refuse_nord/README.rst b/modules/refuse_nord/README.rst
new file mode 100644
index 0000000..c093518
--- /dev/null
+++ b/modules/refuse_nord/README.rst
@@ -0,0 +1,16 @@
+.. SPDX-License-Identifier: GPL-3.0-or-later
+
+.. _mod-refuse_nord:
+
+Refuse queries without RD bit
+=============================
+
+This module ensures all queries without RD (recursion desired) bit set in query
+are answered with REFUSED. This prevents snooping on the resolver's cache content.
+
+The module is loaded by default. If you'd like to disable this behavior, you can
+unload it:
+
+.. code-block:: lua
+
+ modules.unload('refuse_nord')