diff options
Diffstat (limited to 'doc/s6-tcpserver-access.html')
| -rw-r--r-- | doc/s6-tcpserver-access.html | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/doc/s6-tcpserver-access.html b/doc/s6-tcpserver-access.html index 3746118..6de1ca6 100644 --- a/doc/s6-tcpserver-access.html +++ b/doc/s6-tcpserver-access.html @@ -123,8 +123,9 @@ for legacy programs that need it. </li> <li> <tt>-p</tt> : paranoid. After looking up a name for the remote host, s6-tcpserver-access will lookup IP addresses for this name, and drop the connection if none of the results matches the address the connection -is originating from. Note that this still does not replace real -authentication via a cryptographic protocol. </li> +is originating from. For safest results, pair that option with <tt>-w</tt> +so any DNS error drops the connection. (Note that this still does not replace real +authentication via a cryptographic protocol.) </li> <li> <tt>-l <em>localname</em></tt> : use <em>localname</em> as the value for the ${PROTO}LOCALHOST environment variable, instead of looking it up in the DNS. </li> |