GitHub/ergo
3
0
Fork 0
mirror of https://github.com/ergochat/ergo.git synced 2024-11-29 23:49:25 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1239 from slingamn/issue1228_disable_lookup_hostnames

Browse Source 
fix #1228
This commit is contained in:
Shivaram Lingamneni 2020-08-19 12:34:34 -07:00 committed by GitHub
commit c8e2dcb1e9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
default.yaml
View File

@ -141,10 +141,11 @@ server:
# they cannot be relayed to websocket clients). # they cannot be relayed to websocket clients).
enforce-utf8: true enforce-utf8: true
# whether to look up user hostnames with reverse DNS. # whether to look up user hostnames with reverse DNS. there are 3 possibilities:
# (disabling this will expose user IPs instead of hostnames; # 1. lookup-hostnames enabled, IP cloaking disabled; users will see each other's hostnames
# to make IP/hostname information private, see the ip-cloaking section) # 2. lookup-hostnames disabled, IP cloaking disabled; users will see each other's numeric IPs
lookup-hostnames: true # 3. [the default] IP cloaking enabled; users will see cloaked hostnames
lookup-hostnames: false
# whether to confirm hostname lookups using "forward-confirmed reverse DNS", i.e., for # whether to confirm hostname lookups using "forward-confirmed reverse DNS", i.e., for
# any hostname returned from reverse DNS, resolve it back to an IP address and reject it # any hostname returned from reverse DNS, resolve it back to an IP address and reject it
# unless it matches the connecting IP # unless it matches the connecting IP
@ -258,6 +259,7 @@ server:
# DNS, users see fake domain names like pwbs2ui4377257x8.oragono. These names are # DNS, users see fake domain names like pwbs2ui4377257x8.oragono. These names are
# generated deterministically from the underlying IP address, but if the underlying # generated deterministically from the underlying IP address, but if the underlying
# IP is not already known, it is infeasible to recover it from the cloaked name. # IP is not already known, it is infeasible to recover it from the cloaked name.
# If you disable this, you should probably enable lookup-hostnames in its place.
ip-cloaking: ip-cloaking:
# whether to enable IP cloaking # whether to enable IP cloaking
enabled: true enabled: true