updates.

[silc.git] / doc / example_silcd.conf

diff --git a/doc/example_silcd.conf b/doc/example_silcd.conf
index a3b878a430c3f8d4ee64d38990abe48146757d50..6f9afc639a3969d57e616da4614a4fc6480c1e9a 100644 (file)
--- a/doc/example_silcd.conf
+++ b/doc/example_silcd.conf
@@ -6,16 +6,16 @@
 # If the cipher is builtin the <module path> maybe omitted.
 #
 [Cipher]
-aes-256-cbc:../lib/silcsim/modules/aes.sim.so:32:16
-aes-192-cbc:../lib/silcsim/modules/aes.sim.so:24:16
-aes-128-cbc:../lib/silcsim/modules/aes.sim.so:16:16
-twofish-256-cbc:../lib/silcsim/modules/twofish.sim.so:32:16
-twofish-192-cbc:../lib/silcsim/modules/twofish.sim.so:24:16
-twofish-128-cbc:../lib/silcsim/modules/twofish.sim.so:16:16
-mars-256-cbc:../lib/silcsim/modules/mars.sim.so:32:16
-mars-192-cbc:../lib/silcsim/modules/mars.sim.so:24:16
-mars-128-cbc:../lib/silcsim/modules/mars.sim.so:16:16
-none:../lib/silcsim/modules/none.sim.so:0:0
+aes-256-cbc:/usr/local/silc/modules/aes.sim.so:32:16
+aes-192-cbc:/usr/local/silc/modules/aes.sim.so:24:16
+aes-128-cbc:/usr/local/silc/modules/aes.sim.so:16:16
+twofish-256-cbc:/usr/local/silc/modules/twofish.sim.so:32:16
+twofish-192-cbc:/usr/local/silc/modules/twofish.sim.so:24:16
+twofish-128-cbc:/usr/local/silc/modules/twofish.sim.so:16:16
+mars-256-cbc:/usr/local/silc/modules/mars.sim.so:32:16
+mars-192-cbc:/usr/local/silc/modules/mars.sim.so:24:16
+mars-128-cbc:/usr/local/silc/modules/mars.sim.so:16:16
+none:/usr/local/silc/modules/none.sim.so:0:0
 
 #
 # Configured hash functions.
@@ -43,13 +43,10 @@ hmac-md5:md5:16
 #
 # Configured PKCS.
 #
-# Format: <name>:<module path>:<key length>
+# Format: <name>
 #
-# NOTE: <module path> must be omitted as PKCS cannot be modules currently.
-#
-#[PKCS]
-#rsa::1024
-#dss::1024
+[PKCS]
+rsa
 
 #
 # Run SILC server as specific user and group. The server must be initially
@@ -87,7 +84,7 @@ lassi.kuo.fi.ssh.com:10.2.1.6:Kuopio, Finland:706
 #
 # Listenning ports.
 #
-# Format: <local IP/UNIX socket path>:<remote IP>:<port>
+# Format: <local IP>:<Listener IP>:<port>
 #
 [ListenPort]
 10.2.1.6:10.2.1.6:706
@@ -106,10 +103,10 @@ lassi.kuo.fi.ssh.com:10.2.1.6:Kuopio, Finland:706
 #         fatallogile:<path>:<max byte size>
 #
 [Logging]
-infologfile:silcd.log:10000
-#warninglogfile:/var/log/silcd_warning.log:10000
-#errorlogfile:ERROR.log:10000
-#fatallogfile:/var/log/silcd_error.log:
+infologfile:/usr/local/silc/logs/silcd.log:10000
+#warninglogfile:/usr/local/silc/logs/silcd_warning.log:10000
+#errorlogfile:/usr/local/silc/logs/error.log:10000
+#fatallogfile:/usr/local/silc/logs/silcd_error.log:
 
 #
 # Connection classes.
@@ -132,7 +129,7 @@ infologfile:silcd.log:10000
 # file.
 #
 [ClientConnection]
-:::1333:1
+:::706:1
 
 #
 # Configured server administrator connections
@@ -153,13 +150,19 @@ infologfile:silcd.log:10000
 # Thus, if your server is not router do not configure this section.  If
 # your server is router, this must be configured.
 #
-# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<vlass>
+# Format: <remote host>:<auth method>:<auth data>:<port>:
+#         <version ID>:<class>:<backup connection>
 #
 # The <auth data> is either passphrase or file path to the public key
-# file.
+# file. If the connection is backup connection then set the <backup 
+# connection> to value 1. For normal connections set it 0. If it is
+# set to value 1 then this server will be backup router.
 #
 [ServerConnection]
-10.2.1.7:passwd:veryscret:706:1:1
+10.2.1.7:passwd:veryscret:706:1:1:0
+10.2.1.17:passwd:veryscret13:706:1:1:1   # backup connection, that host
+                                         # will use this server as backup
+                                         # router.
 
 #
 # Configured router connections.
@@ -169,19 +172,30 @@ infologfile:silcd.log:10000
 # this sections includes all configured router connections.  The first
 # configured connection is the primary route.
 #
-# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:<class>:<initiator>
+# Format: <remote host>:<auth method>:<auth data>:<port>:<version ID>:
+#         <class>:<initiator>:<backup connection>:<local backup>
 #
 # The <auth data> is either passphrase or file path to the public key
-# file.
+# file. If you are the initiator of the connection then set the <initiator>
+# to value 1.  If you are the responder of the connection (waiting for 
+# incoming connection) then set it to 0.
+#
+# If the connection is backup router connection then set the <backup
+# connection> to value 1.  For normal connection set it to 0.  If this
+# backup router is in our cell then set the <local backup> to value 1.
+# If the backup router is in other cell then set it to value 0.
 #
 [RouterConnection]
-#10.2.1.100:passwd:veryverysecret:706:1:1:1
+#10.2.1.100:passwd:veryverysecret:706:1:1:1:0:0
+#10.2.100.131:pubkey:/path/to/the/publickey:706:1:1:1:0:0
+#10.2.100.100:pubkey:/path/to/the/publickey:706:1:1:0:1:1
 
 #
 # Denied connections.
 #
 # These connections are denied to connect our server.
 #
-# Format: <remote host/nickname>:<time interval>:<comment>:<port>
+# Format: <remote host>:<port>:<comment>
 #
 [DenyConnection]
+#10.2.1.99:0:Your connection has been denied