From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Mon, 26 Jul 2010 13:26:53 +0000 (+0200)
Subject: oidentd: Add default configuration.
X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fservers%2Fdrsnuggles.git;a=commitdiff_plain;h=94063426f36b90b391ed37c28a83980ae22a14c9

oidentd: Add default configuration.
---

diff --git a/etc/default/oidentd b/etc/default/oidentd
new file mode 100644
index 0000000..14bec1e
--- /dev/null
+++ b/etc/default/oidentd
@@ -0,0 +1,17 @@
+# options to use when starting oidentd as daemon:
+# -m	lookup masquaraded connections in /etc/oidentd_masq.users
+# -f	forward requests for masquaraded connections to real host
+# -q	don't log connections to oidentd
+# see oidentd(8) for detailed list
+OIDENT_OPTIONS="-mf"
+
+# user / group
+OIDENT_USER=oident
+OIDENT_GROUP=oident
+
+# Allow the default router to act as an oidentd proxy? (yes/no)
+# this is needed behind a masquarading router that runs oidentd -f
+# if your identd proxy is not the default router, you have to
+# manually specify it via -P
+OIDENT_BEHIND_PROXY=yes
+
diff --git a/etc/oidentd.conf b/etc/oidentd.conf
new file mode 100644
index 0000000..03b28d8
--- /dev/null
+++ b/etc/oidentd.conf
@@ -0,0 +1,22 @@
+# Configuration for oidentd
+# see oidentd.conf(5)
+# 
+default {
+	default {
+		deny spoof
+		deny spoof_all
+		deny spoof_privport
+		allow random
+		allow random_numeric
+		allow numeric
+		deny hide
+	}
+}
+
+# you may want to hide root connections
+#user "root" {
+#	default {
+#		force reply "UNKNOWN"
+#	}
+#}
+
diff --git a/etc/oidentd_masq.conf b/etc/oidentd_masq.conf
new file mode 100644
index 0000000..8fb03f1
--- /dev/null
+++ b/etc/oidentd_masq.conf
@@ -0,0 +1,11 @@
+# oident masquarded connections configuration
+
+# use this file if your host is masquarading connections for several
+# hosts and you want to return a reply based on the hostname of
+# the originating machine
+# by default, such requests are forwarded to the real host.
+# you can disable forwarding by removing "-f" from OIDENT_OPTIONS
+# in /etc/default/oidentd
+
+# add hosts in the following format, see oidentd_masq.conf(5) for details:
+# <ip or host>[/mask] <username> <os>