From 66b80d96a2552c2c1e58a771346ce8e9f38acb34 Mon Sep 17 00:00:00 2001 From: Michael Orlitzky Date: Wed, 31 Jul 2013 15:41:20 -0400 Subject: [PATCH] Add an example of --no-append-root. --- doc/man1/haeredes.1 | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/doc/man1/haeredes.1 b/doc/man1/haeredes.1 index 31eeff7..2c8508e 100644 --- a/doc/man1/haeredes.1 +++ b/doc/man1/haeredes.1 @@ -85,8 +85,6 @@ So that's what we do. In NS mode, Haeredes will check both the Don't append a trailing dot to any DNS names. If you know what you're doing, this can be used to check relative results. Otherwise, it will probably just lead to false positives. -.SH EXAMPLES - .IP \fB\-\-server\fR,\ \fB-s\fR Use the given DNS server rather than the resolvers listed in /etc/resolv.conf. Either an IP address or a hostname will work. @@ -99,6 +97,19 @@ Make sure example.com has the expected name servers, .nf .I $ haeredes a.iana-servers.net b.iana-servers.net <<< \(dqexample.com\(dq .fi + +.IP \[bu] 2 +If you use \-\-no\-append\-root and your nameservers are rooted, you +must remember to supply the trailing dot yourself. Otherwise, you'll +get false positives. + +.nf +.I $ haeredes \-\-no\-append\-root \\\\ +.I " a.iana-servers.net b.iana-servers.net" \\\\ +.I " <<< \(dqexample.com\(dq" +Domain \(dqexample.com\(dq delegates somewhere else: +\(dqb.iana-servers.net.\(dq \(dqa.iana-servers.net.\(dq +.fi .IP \[bu] Check orlitzky.com against the expected name servers, using a root nameserver (this checks the registrar configuration): -- 2.44.2