pikemon.cfg — format of pikemon program configuration file
General syntax rules of Kernun Firewall configuration files are described in configuration(7). This man page describes types, sections and items specific for the pikemon.cfg configuration file.
Repeatable sections/items are marked by
the '*' before section/item name.
Configuration directives have attributes of several value-types. For the basic types description, see configuration(7).
Enumeration is a list of words (names) representing integer values. Some enumerations accept both names and direct integer values; in this case, enumeration description contains values for every name (in parenthesis next to name). For other enumerations, using of names is obligatory.
The following enumerations are used in pikemon.cfg configuration directives:
enabling (see common(5))yes-no (see common(5))ip-version (see common(5))osi4-proto (see common(5))time-cond (see common(5))zip-mode (see common(5))dbglev (see log(5))logfail-mode (see log(5))lagg-protocol (see interface(5))listen-on-sock (see listen-on(5))log-in-vain-proto (see sysctl(5))blackhole-proto (see sysctl(5))proc-priority (see application(5))pike-control-type (see pike(5))Program pikemon recognizes following items and sections:
* interface name { ... }
* resolver name { ... }
sysctl { ... }
use-resolver ... ;
pikemon { ... }
ipv6-mode ... ;
interface name {
dev ... ;
ipv4 ... ;
ipv6 ... ;
mac ... ;
aggregate ... ;
pike ... ;
vlan ... ;
tunnel ... ;
dhcp-client ... ;
ipv6-rtadv { ... }
* alias name { ... }
* tag ... ;
}
interface section is derived from
interface section prototype.
For detail description of it, see interface(5).
resolver name {
* server ... ;
search ... ;
preference ... ;
edns ... ;
conf-timeout ... ;
initial-timeout ... ;
final-timeout ... ;
conn-timeout ... ;
disable-deresolution ... ;
}
resolver section is derived from
resolver section prototype.
For detail description of it, see resolver(5).
sysctl {
* variable ... ;
portrange-default ... ;
portrange-high ... ;
portrange-low ... ;
portrange-reserved ... ;
somaxconn ... ;
log-in-vain ... ;
blackhole ... ;
}
sysctl section is derived from
sysctl section prototype.
For detail description of it, see sysctl(5).
use-resolver name;Resolver Section Specification.
This item defines name of global (system) resolver section used in particular configuration environment. Namely, it is applicable within SYSTEM section and within any section derived from PROXY prototype. The former usage defines system-wide values, the latter one values valid for particular proxy.
name (type: name of resolver, see resolver(5))pikemon {
phase ... ;
* tag ... ;
log-debug { ... }
log-stats { ... }
use-resolver ... ;
cfg-resolution ... ;
monitoring { ... }
stats-daily { ... }
stats-weekly { ... }
stats-monthly { ... }
nodaemon ... ;
singleproc ... ;
app-user ... ;
idle-timeout ... ;
run-block-sigalrm ... ;
listen-on { ... }
udpserver { ... }
priority ... ;
status-file ... ;
hmac ... ;
devd-socket ... ;
garp-keepalive ... ;
* virtual-cluster name { ... }
}
pikemon section is derived from
pikemon section prototype.
For detail description of it, see pike(5).
ipv6-mode [status];Enabling/Disabling IPv6 Mode.
status (type: enabling, optional, default: enable)configuration(7), pikemon(8), application(5), common(5), interface(5), listen-on(5), log(5), pike(5), resolver(5), sysctl(5)