|
|
|
|
141
|
# they cannot be relayed to websocket clients).
|
141
|
# they cannot be relayed to websocket clients).
|
142
|
enforce-utf8: true
|
142
|
enforce-utf8: true
|
143
|
|
143
|
|
144
|
- # whether to look up user hostnames with reverse DNS.
|
|
|
145
|
- # (disabling this will expose user IPs instead of hostnames;
|
|
|
146
|
- # to make IP/hostname information private, see the ip-cloaking section)
|
|
|
147
|
- lookup-hostnames: true
|
|
|
|
|
144
|
+ # whether to look up user hostnames with reverse DNS. there are 3 possibilities:
|
|
|
145
|
+ # 1. lookup-hostnames enabled, IP cloaking disabled; users will see each other's hostnames
|
|
|
146
|
+ # 2. lookup-hostnames disabled, IP cloaking disabled; users will see each other's numeric IPs
|
|
|
147
|
+ # 3. [the default] IP cloaking enabled; users will see cloaked hostnames
|
|
|
148
|
+ lookup-hostnames: false
|
148
|
# whether to confirm hostname lookups using "forward-confirmed reverse DNS", i.e., for
|
149
|
# whether to confirm hostname lookups using "forward-confirmed reverse DNS", i.e., for
|
149
|
# any hostname returned from reverse DNS, resolve it back to an IP address and reject it
|
150
|
# any hostname returned from reverse DNS, resolve it back to an IP address and reject it
|
150
|
# unless it matches the connecting IP
|
151
|
# unless it matches the connecting IP
|
|
|
|
|
258
|
# DNS, users see fake domain names like pwbs2ui4377257x8.oragono. These names are
|
259
|
# DNS, users see fake domain names like pwbs2ui4377257x8.oragono. These names are
|
259
|
# generated deterministically from the underlying IP address, but if the underlying
|
260
|
# generated deterministically from the underlying IP address, but if the underlying
|
260
|
# IP is not already known, it is infeasible to recover it from the cloaked name.
|
261
|
# IP is not already known, it is infeasible to recover it from the cloaked name.
|
|
|
262
|
+ # If you disable this, you should probably enable lookup-hostnames in its place.
|
261
|
ip-cloaking:
|
263
|
ip-cloaking:
|
262
|
# whether to enable IP cloaking
|
264
|
# whether to enable IP cloaking
|
263
|
enabled: true
|
265
|
enabled: true
|