exit.conf 2.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768
  1. [exit]
  2. BINARY = gnunet-daemon-exit
  3. # IPv6 address for the TUN interface (must be changed as this
  4. # must be within the global IPv6 range of your system!)
  5. IPV6ADDR = 2001:DB8::1
  6. # Prefix for our IPv6 subnet on the TUN interface.
  7. IPV6PREFIX = 64
  8. # IPv4 address to use on our TUN interface (may need to be
  9. # changed to avoid conflicts with existing addresses on your system).
  10. # Use RFC 3927-style link-local address
  11. IPV4ADDR = 169.254.86.1
  12. # Netmask for the IPv4 subnet on the TUN interface.
  13. IPV4MASK = 255.255.255.0
  14. # IPv4 networks to which we are allowed to exit.
  15. # The format is "(network[/netmask][:[!]SPORT-DPORT];)*"
  16. EXIT_RANGE_IPV4_POLICY = 0.0.0.0/0:!25;
  17. # IPv6 networks to which we are allowed to exit.
  18. # The format is "(network[/netmask][:[!]SPORT-DPORT];)*"
  19. EXIT_RANGE_IPV6_POLICY = ::/0:!25;
  20. # Not a service, tell ARM no binding!
  21. NOARMBIND = YES
  22. # Name of the (virtual) tunnel interface the exit daemon will manage
  23. TUN_IFNAME = exit-gnunet
  24. # Name of the "real" interface that IPv4 traffic from this system will
  25. # leave from; this is the name of the interface where we need to
  26. # enable NAT on postrouting (typically something like 'eth0' or 'eth1'
  27. # or 'wlan0'). Not needed if EXIT_IPv4 is disabled AND if all
  28. # offered services run on 'localhost'. In this case, the value
  29. # of the option can instead be set to "%" (to not enable NAT on any
  30. # interface).
  31. EXIT_IFNAME = eth0
  32. # Set this to YES to allow exiting this system via IPv4 to the Internet
  33. EXIT_IPV4 = NO
  34. # Set this to YES to allow exiting this system via IPv6 to the Internet
  35. EXIT_IPV6 = NO
  36. # This option should be set to YES to allow the DNS service to
  37. # perform lookups against the locally configured DNS resolver.
  38. # (set to "NO" if no normal ISP is locally available and thus
  39. # requests for normal ".com"/".org"/etc. must be routed via
  40. # the GNUnet VPN (the GNUNET PT daemon then needs to be configured
  41. # to intercept and route DNS queries via cadet).
  42. # Set this to YES to allow using this system for DNS queries.
  43. EXIT_DNS = NO
  44. # Set this to an IPv4 or IPv6 address of a DNS resolver to use for DNS queries
  45. DNS_RESOLVER = 8.8.8.8
  46. # For IPv4-services offered by this peer, we need to at least enable IPv4
  47. ENABLE_IPV4 = YES
  48. # For IPv6-services offered by this peer, we need to at least enable IPv6
  49. ENABLE_IPV6 = YES
  50. # Maximum number of concurrent connections this exit supports.
  51. MAX_CONNECTIONS = 256