diff options
Diffstat (limited to 'man/dnsmasq.8')
| -rw-r--r-- | man/dnsmasq.8 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/man/dnsmasq.8 b/man/dnsmasq.8 index 5cdd186..097e7d7 100644 --- a/man/dnsmasq.8 +++ b/man/dnsmasq.8 @@ -674,6 +674,12 @@ that dnsmasq should be started with this flag when the platform determines that reliable time is established, a SIGHUP should be sent to dnsmasq, which enables time checking, and purges the cache of DNS records which have not been throughly checked. .TP +.B --dnssec-timestamp=<path> +Enables an alternative way of checking the validity of the system time for DNSSEC (see --dnssec-no-timecheck). In this case, the +system time is considered to be valid once it becomes later than the timestamp on the specified file. The file is created and +its timestamp set automatically by dnsmasq. The file must be stored on a persistent filesystem, so that it and its mtime are carried +over system restarts. +.TP .B --proxy-dnssec Copy the DNSSEC Authenticated Data bit from upstream servers to downstream clients and cache it. This is an alternative to having dnsmasq validate DNSSEC, but it depends on the security of the network between |