Bladeren bron

Merge pull request #1239 from slingamn/issue1228_disable_lookup_hostnames

fix #1228
tags/v2.3.0-rc1
Shivaram Lingamneni 3 jaren geleden
bovenliggende
commit
c8e2dcb1e9
No account linked to committer's email address
1 gewijzigde bestanden met toevoegingen van 6 en 4 verwijderingen
  1. 6
    4
      default.yaml

+ 6
- 4
default.yaml Bestand weergeven

141
     # they cannot be relayed to websocket clients).
141
     # they cannot be relayed to websocket clients).
142
     enforce-utf8: true
142
     enforce-utf8: true
143
 
143
 
144
-    # whether to look up user hostnames with reverse DNS.
145
-    # (disabling this will expose user IPs instead of hostnames;
146
-    # to make IP/hostname information private, see the ip-cloaking section)
147
-    lookup-hostnames: true
144
+    # whether to look up user hostnames with reverse DNS. there are 3 possibilities:
145
+    # 1. lookup-hostnames enabled, IP cloaking disabled; users will see each other's hostnames
146
+    # 2. lookup-hostnames disabled, IP cloaking disabled; users will see each other's numeric IPs
147
+    # 3. [the default] IP cloaking enabled; users will see cloaked hostnames
148
+    lookup-hostnames: false
148
     # whether to confirm hostname lookups using "forward-confirmed reverse DNS", i.e., for
149
     # whether to confirm hostname lookups using "forward-confirmed reverse DNS", i.e., for
149
     # any hostname returned from reverse DNS, resolve it back to an IP address and reject it
150
     # any hostname returned from reverse DNS, resolve it back to an IP address and reject it
150
     # unless it matches the connecting IP
151
     # unless it matches the connecting IP
258
     # DNS, users see fake domain names like pwbs2ui4377257x8.oragono. These names are
259
     # DNS, users see fake domain names like pwbs2ui4377257x8.oragono. These names are
259
     # generated deterministically from the underlying IP address, but if the underlying
260
     # generated deterministically from the underlying IP address, but if the underlying
260
     # IP is not already known, it is infeasible to recover it from the cloaked name.
261
     # IP is not already known, it is infeasible to recover it from the cloaked name.
262
+    # If you disable this, you should probably enable lookup-hostnames in its place.
261
     ip-cloaking:
263
     ip-cloaking:
262
         # whether to enable IP cloaking
264
         # whether to enable IP cloaking
263
         enabled: true
265
         enabled: true

Laden…
Annuleren
Opslaan