[exit] BINARY = gnunet-daemon-exit # IPv6 address for the TUN interface (must be changed as this # must be within the global IPv6 range of your system!) IPV6ADDR = 2001:DB8::1 # Prefix for our IPv6 subnet on the TUN interface. IPV6PREFIX = 64 # IPv4 address to use on our TUN interface (may need to be # changed to avoid conflicts with existing addresses on your system). # Use RFC 3927-style link-local address IPV4ADDR = 169.254.86.1 # Netmask for the IPv4 subnet on the TUN interface. IPV4MASK = 255.255.255.0 # IPv4 networks to which we are allowed to exit. # The format is "(network[/netmask][:[!]SPORT-DPORT];)*" EXIT_RANGE_IPV4_POLICY = 0.0.0.0/0:!25; # IPv6 networks to which we are allowed to exit. # The format is "(network[/netmask][:[!]SPORT-DPORT];)*" EXIT_RANGE_IPV6_POLICY = ::/0:!25; # Name of the (virtual) tunnel interface the exit daemon will manage TUN_IFNAME = exit-gnunet # Name of the "real" interface that IPv4 traffic from this system will # leave from; this is the name of the interface where we need to # enable NAT on postrouting (typically something like 'eth0' or 'eth1' # or 'wlan0'). Not needed if EXIT_IPv4 is disabled AND if all # offered services run on 'localhost'. In this case, the value # of the option can instead be set to "%" (to not enable NAT on any # interface). EXIT_IFNAME = eth0 # Set this to YES to allow exiting this system via IPv4 to the Internet EXIT_IPV4 = NO # Set this to YES to allow exiting this system via IPv6 to the Internet EXIT_IPV6 = NO # This option should be set to YES to allow the DNS service to # perform lookups against the locally configured DNS resolver. # (set to "NO" if no normal ISP is locally available and thus # requests for normal ".com"/".org"/etc. must be routed via # the GNUnet VPN (the GNUNET PT daemon then needs to be configured # to intercept and route DNS queries via cadet). # Set this to YES to allow using this system for DNS queries. EXIT_DNS = NO # Set this to an IPv4 or IPv6 address of a DNS resolver to use for DNS queries DNS_RESOLVER = 8.8.8.8 # For IPv4-services offered by this peer, we need to at least enable IPv4 ENABLE_IPV4 = YES # For IPv6-services offered by this peer, we need to at least enable IPv6 ENABLE_IPV6 = YES # Maximum number of concurrent connections this exit supports. MAX_CONNECTIONS = 256