diff --git a/man5/host.conf.5 b/man5/host.conf.5 index a5ff25a9a..cac3803c7 100644 --- a/man5/host.conf.5 +++ b/man5/host.conf.5 @@ -40,7 +40,7 @@ Each time it should be followed by a list of domains, separated by colons (\(aq:\(aq), semicolons (\(aq;\(aq) or commas (\(aq,\(aq), with the leading dot. When set, the -resolv+ library will automatically trim the given domain name from the +resolver library will automatically trim the given domain name from the end of any hostname resolved via DNS. This is intended for use with local hosts and domains. @@ -56,7 +56,7 @@ Valid values are .IR on " and " off . If set to .IR on , -the resolv+ library will return all valid addresses for a host that +the resolver library will return all valid addresses for a host that appears in the .I /etc/hosts file, @@ -71,7 +71,8 @@ Valid values are .IR on " and " off . If set to .IR on , -resolv+ will attempt to reorder host addresses so that local addresses +the resolver library +will attempt to reorder host addresses so that local addresses (i.e., on the same subnet) are listed first when a .BR gethostbyname (3) is performed. @@ -152,11 +153,11 @@ Valid values are .IR on " and " off . If set to .IR on , -the resolv+ library will attempt to prevent hostname spoofing to +the resolver library will attempt to prevent hostname spoofing to enhance the security of .BR rlogin " and " rsh . -It works as follows: after performing a host address lookup, resolv+ -will perform a hostname lookup for that address. +It works as follows: after performing a host address lookup, +the resolver library will perform a hostname lookup for that address. If the two hostnames do not match, the query will fail. The default value is @@ -169,7 +170,8 @@ If this option is set to .I on and the .I nospoof -option is also set, resolv+ will log a warning of the error via the +option is also set, +the resolver library will log a warning of the error via the syslog facility. The default value is .IR off . @@ -183,12 +185,12 @@ spoofed addresses are permitted and no warnings will be emitted via the syslog facility. If this option is set to .IR warn , -resolv+ will attempt to prevent hostname spoofing to +the resolver library will attempt to prevent hostname spoofing to enhance the security and log a warning of the error via the syslog facility. If this option is set to .IR nowarn , -the resolv+ library will attempt to prevent hostname spoofing to +the resolver library will attempt to prevent hostname spoofing to enhance the security but not emit warnings via the syslog facility. Setting this option to anything else is equal to setting it to .IR nowarn .