diff --git a/bin/dig/dig.1 b/bin/dig/dig.1 index 9041c96282..7eafab2faa 100644 --- a/bin/dig/dig.1 +++ b/bin/dig/dig.1 @@ -367,6 +367,26 @@ and the query options that have been applied\&. This comment is printed by defau Toggle the display of comment lines in the output\&. The default is to print comments\&. .RE .PP +\fB+[no]cookie\fR\fB[=####]\fR +.RS 4 +Send an COOKIE EDNS option, containing an optional +\fIvalue\fR\&. Replaying a COOKIE from a previous response will allow the server to identify a previous client\&. The default is +\fB+nocookie\fR\&. +.sp +\fB+cookie\fR +is automatically set when +trace is in use, to better emulate the default queries from a nameserver\&. +.sp +This option was formerly called +\fB+[no]sit\fR +(Server Identity Token)\&. In BIND 9\&.10\&.0 through BIND 9\&.10\&.2, it sent the experimental option code 65001\&. This was changed to option code 10 in BIND 9\&.10\&.3 when the DNS COOKIE option was allocated\&. +.sp +The +\fB+[no]sit\fR +is now deprecated, but has been retained as a synonym for +\fB+[no]cookie\fR +for backward compatibility within the BIND 9\&.10 branch\&. +.RE +.PP \fB+[no]crypto\fR .RS 4 Toggle the display of cryptographic fields in DNSSEC records\&. The contents of these field are unnecessary to debug most DNSSEC validation failures and removing them makes it easier to see the common failures\&. The default is to display the fields\&. When omitted they are replaced by the string "[omitted]" or in the DNSKEY case the key id is displayed as the replacement, e\&.g\&. "[ key id = value ]"\&. @@ -579,12 +599,12 @@ instead\&. .PP \fB+[no]sit\fR\fB[=####]\fR .RS 4 -Send a DNS COOKIE option, with optional value\&. Replaying a DNS COOKIE from a previous response will allow the server to identify a previous client\&. The default is -\fB+nosit\fR\&. +This option is a synonym for +\fB+[no]cookie\fR\&. .sp -This option is -\fB+[no]cookie\fR -from BIND 9\&.11\&.0 onwards\&. BIND 9\&.10\&.0 through BIND 9\&.10\&.2 sent the experimental option code 65001\&. This was changed to 10 in BIND 9\&.10\&.3 when the DNS COOKIE option was allocated\&. +The +\fB+[no]sit\fR +is deprecated\&. .RE .PP \fB+split=W\fR diff --git a/bin/dig/dig.html b/bin/dig/dig.html index fbfad1f80d..1eca0a1a5b 100644 --- a/bin/dig/dig.html +++ b/bin/dig/dig.html @@ -482,6 +482,33 @@ The default is to print comments.

+
+[no]cookie[=####]
+
+

+ Send an COOKIE EDNS option, containing an optional + value. Replaying a COOKIE + from a previous response will allow the server to + identify a previous client. The default is + +nocookie. +

+

+ +cookie is automatically set when +trace + is in use, to better emulate the default queries from a + nameserver. +

+

+ This option was formerly called +[no]sit + (Server Identity Token). In BIND 9.10.0 through BIND 9.10.2, + it sent the experimental option code 65001. This was + changed to option code 10 in BIND 9.10.3 when the DNS + COOKIE option was allocated. +

+

+ The +[no]sit is now deprecated, but has + been retained as a synonym for +[no]cookie + for backward compatibility within the BIND 9.10 branch. +

+
+[no]crypto

@@ -756,17 +783,10 @@

+[no]sit[=####]

- Send a DNS COOKIE option, with optional value. - Replaying a DNS COOKIE from a previous response will - allow the server to identify a previous client. The - default is +nosit. + This option is a synonym for +[no]cookie.

- This option is +[no]cookie from - BIND 9.11.0 onwards. BIND 9.10.0 through BIND 9.10.2 - sent the experimental option code 65001. This was - changed to 10 in BIND 9.10.3 when the DNS COOKIE - option was allocated. + The +[no]sit is deprecated.

+split=W
diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 4767bade54..c13db90da7 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -500,6 +500,33 @@ The default is to print comments.

+
+[no]cookie[=####]
+
+

+ Send an COOKIE EDNS option, containing an optional + value. Replaying a COOKIE + from a previous response will allow the server to + identify a previous client. The default is + +nocookie. +

+

+ +cookie is automatically set when +trace + is in use, to better emulate the default queries from a + nameserver. +

+

+ This option was formerly called +[no]sit + (Server Identity Token). In BIND 9.10.0 through BIND 9.10.2, + it sent the experimental option code 65001. This was + changed to option code 10 in BIND 9.10.3 when the DNS + COOKIE option was allocated. +

+

+ The +[no]sit is now deprecated, but has + been retained as a synonym for +[no]cookie + for backward compatibility within the BIND 9.10 branch. +

+
+[no]crypto

@@ -774,17 +801,10 @@

+[no]sit[=####]

- Send a DNS COOKIE option, with optional value. - Replaying a DNS COOKIE from a previous response will - allow the server to identify a previous client. The - default is +nosit. + This option is a synonym for +[no]cookie.

- This option is +[no]cookie from - BIND 9.11.0 onwards. BIND 9.10.0 through BIND 9.10.2 - sent the experimental option code 65001. This was - changed to 10 in BIND 9.10.3 when the DNS COOKIE - option was allocated. + The +[no]sit is deprecated.

+split=W