Updated mtaserver.conf comments

multitheftauto · Apr 15, 2017 · 33e2201 · 33e2201
1 parent 31b740c
commit 33e2201
Show file tree

Hide file tree

Showing 3 changed files with 86 additions and 20 deletions.
diff --git a/Server/mods/deathmatch/editor.conf b/Server/mods/deathmatch/editor.conf
@@ -4,6 +4,13 @@
          and on Game-Monitor. It is a required parameter. -->
     <servername>Map Editor Server</servername>
 
+    <!-- This parameter specifies the contact email addresses for the owner(s) of this server.
+         The email addresses will not be publicly available, and only used by MTA administrators
+         to contact the server owner.
+         Note: Missing or incorrect owner_email_address can affect visibility in the master server list.
+         Values: Comma separated list of email addresses -->
+    <owner_email_address></owner_email_address>
+
     <!-- ONLY USE THIS PARAMETER IF YOU ARE SURE OF WHAT YOU ARE DOING - it is generally only
          needed for professional servers and should be left at the default value otherwise.
          This parameter specifies the IP to use for servers that have multiple IP addresses. If set
@@ -31,12 +38,6 @@
          are switched to the internal http server. -->
     <httpdownloadurl></httpdownloadurl>
 
-    <!-- This parameter specifies whether the client files for hosting on an external web server should be
-         automatically copied into mods/deathmatch/resource-cache/http-client-files/
-         Only relevant if <httpdownloadurl> is set.
-         Values: 0 - disabled , 1 - enabled ; default value: 1. Optional parameter. -->
-    <httpautoclientfiles>0</httpautoclientfiles>
-
     <!-- This parameter limits the number of http connections each client can make. Depending on the type
          of http server that is used, a lower figure may reduce download timeouts.
          Available range: 1 to 8. -->
@@ -82,7 +83,7 @@
 
     <!-- This parameter specifies if/when the <minclientversion> setting is automatically updated.
          Keeping <minclientversion> updated can help reduce cheating.
-         Note: The instant setting (2) is only recommened for competitive servers.
+         Note: The instant setting (2) is only recommended for competitive servers.
          Values: 0 - disabled, 1 - enabled (delayed by a few days), 2 - enabled (instant) ; default value: 1.  -->
     <minclientversion_auto_update>0</minclientversion_auto_update>
 
@@ -128,8 +129,8 @@
     <keysync_analog_sync_interval>100</keysync_analog_sync_interval> 
 
     <!-- This parameter can improve the reliability of shots when using certain weapons. However, it uses more bandwidth.
-         Values: 0 - disabled , 1 - enabled ; default value: 0. -->
-    <bullet_sync>0</bullet_sync> 
+         Values: 0 - disabled , 1 - enabled ; default value: 1. -->
+    <bullet_sync>1</bullet_sync> 
 
     <!-- This parameter sets the amount of extrapolation that clients will apply to remote vehicles. This can reduce
          some of the latency induced location disparency by predicting where the remote vehicles will probably be.
@@ -183,12 +184,12 @@
     <!-- Specifies the level of the html debug. Available values: 0, 1, 2, 3. When not set, defaults to 0. -->
     <htmldebuglevel>0</htmldebuglevel>
 
+    <!-- Specifies whether or not duplicate log lines should be filtered. Available values: 0 or 1, defaults to 1. -->
+    <filter_duplicate_log_lines>1</filter_duplicate_log_lines>
+
     <!-- Specifies the frame rate limit that will be applied to connecting clients.
          Available range: 25 to 100. Default: 50. -->
     <fpslimit>50</fpslimit>
-
-    <!-- Specifies whether or not players should automatically be logged in based on their IP adresses -->
-    <autologin>0</autologin>
 
     <!-- This parameter specifies whether or not to enable player voice chat in-game
          Values: 0 - disabled , 1 - enabled -->
@@ -232,6 +233,34 @@
          Values: 0 - Off, 1 - On. Default - 1 -->
     <crash_dump_upload>0</crash_dump_upload>
 
+    <!-- This parameter lists the ACL groups that are protected by serial authorization.
+         Login attempts to a protected account from a second serial are blocked until the serial is manually authorized via
+         the authserial command.
+         For more info see: https://mtasa.com/authserial
+         Note: This is security critical feature and disabling auth_serial_groups can affect visibility in the master server list.
+         Values: Comma separated list of ACL groups.  Default - Admin -->
+    <auth_serial_groups></auth_serial_groups>
+
+    <!-- This parameter specifies if the authorized serial login checks should also apply to the http interface.
+         Protected account login attempts to the http interface will only succeed if the IP address matches one
+         recently used by the account holder in-game
+         For more info see: https://mtasa.com/authserialhttp
+         Note: This is security critical feature and disabling auth_serial_http can affect visibility in the master server list.
+         Values: 0 - Off, 1 - Enabled.  Default - 1 -->
+    <auth_serial_http>0</auth_serial_http>
+
+    <!-- This parameter specifies which IP addresses should always pass auth_serial_http checks.
+         Values: Comma separated list of IP addresses -->
+    <auth_serial_http_ip_exceptions>127.0.0.1</auth_serial_http_ip_exceptions>
+
+    <!-- This parameter specifies if extra security measures are applied to resources which use dbConnect with mysql.
+         The extra measures are:
+           - Script files cannot be accessed with fileOpen()
+           - meta.xml is read only
+         *NOTE* This only protects resources which use dbConnect with mysql
+         Values: 0 - Off, 1 - Enabled.  Default - 1 -->
+    <database_credentials_protection>1</database_credentials_protection>
+
     <!-- Specifies the module(s) which are loaded with the server. To load several modules, add more <module>
          parameter(s). Optional parameter. -->
     <!-- <module src="sample_win32.dll"/> -->

diff --git a/Server/mods/deathmatch/local.conf b/Server/mods/deathmatch/local.conf
@@ -4,6 +4,13 @@
          and on Game-Monitor. It is a required parameter. -->
     <servername>Default MTA Server</servername>
 
+    <!-- This parameter specifies the contact email addresses for the owner(s) of this server.
+         The email addresses will not be publicly available, and only used by MTA administrators
+         to contact the server owner.
+         Note: Missing or incorrect owner_email_address can affect visibility in the master server list.
+         Values: Comma separated list of email addresses -->
+    <owner_email_address></owner_email_address>
+
     <!-- ONLY USE THIS PARAMETER IF YOU ARE SURE OF WHAT YOU ARE DOING - it is generally only
          needed for professional servers and should be left at the default value otherwise.
          This parameter specifies the IP to use for servers that have multiple IP addresses. If set
@@ -76,7 +83,7 @@
 
     <!-- This parameter specifies if/when the <minclientversion> setting is automatically updated.
          Keeping <minclientversion> updated can help reduce cheating.
-         Note: The instant setting (2) is only recommened for competitive servers.
+         Note: The instant setting (2) is only recommended for competitive servers.
          Values: 0 - disabled, 1 - enabled (delayed by a few days), 2 - enabled (instant) ; default value: 1.  -->
     <minclientversion_auto_update>0</minclientversion_auto_update>
 
@@ -177,12 +184,12 @@
     <!-- Specifies the level of the html debug. Available values: 0, 1, 2, 3. When not set, defaults to 0. -->
     <htmldebuglevel>0</htmldebuglevel>
 
+    <!-- Specifies whether or not duplicate log lines should be filtered. Available values: 0 or 1, defaults to 1. -->
+    <filter_duplicate_log_lines>1</filter_duplicate_log_lines>
+
     <!-- Specifies the frame rate limit that will be applied to connecting clients.
          Available range: 25 to 100. Default: 36. -->
     <fpslimit>36</fpslimit>
-
-    <!-- Specifies whether or not players should automatically be logged in based on their IP adresses -->
-    <autologin>0</autologin>
 
     <!-- This parameter specifies whether or not to enable player voice chat in-game
          Values: 0 - disabled , 1 - enabled -->
@@ -226,6 +233,34 @@
          Values: 0 - Off, 1 - On. Default - 1 -->
     <crash_dump_upload>0</crash_dump_upload>
 
+    <!-- This parameter lists the ACL groups that are protected by serial authorization.
+         Login attempts to a protected account from a second serial are blocked until the serial is manually authorized via
+         the authserial command.
+         For more info see: https://mtasa.com/authserial
+         Note: This is security critical feature and disabling auth_serial_groups can affect visibility in the master server list.
+         Values: Comma separated list of ACL groups.  Default - Admin -->
+    <auth_serial_groups>Admin</auth_serial_groups>
+
+    <!-- This parameter specifies if the authorized serial login checks should also apply to the http interface.
+         Protected account login attempts to the http interface will only succeed if the IP address matches one
+         recently used by the account holder in-game
+         For more info see: https://mtasa.com/authserialhttp
+         Note: This is security critical feature and disabling auth_serial_http can affect visibility in the master server list.
+         Values: 0 - Off, 1 - Enabled.  Default - 1 -->
+    <auth_serial_http>1</auth_serial_http>
+
+    <!-- This parameter specifies which IP addresses should always pass auth_serial_http checks.
+         Values: Comma separated list of IP addresses -->
+    <auth_serial_http_ip_exceptions>127.0.0.1</auth_serial_http_ip_exceptions>
+
+    <!-- This parameter specifies if extra security measures are applied to resources which use dbConnect with mysql.
+         The extra measures are:
+           - Script files cannot be accessed with fileOpen()
+           - meta.xml is read only
+         *NOTE* This only protects resources which use dbConnect with mysql
+         Values: 0 - Off, 1 - Enabled.  Default - 1 -->
+    <database_credentials_protection>1</database_credentials_protection>
+
     <!-- Specifies the module(s) which are loaded with the server. To load several modules, add more <module>
          parameter(s). Optional parameter. -->
     <!-- <module src="sample_win32.dll"/> -->

diff --git a/Server/mods/deathmatch/mtaserver.conf b/Server/mods/deathmatch/mtaserver.conf
@@ -5,7 +5,9 @@
     <servername>Default MTA Server</servername>
 
     <!-- This parameter specifies the contact email addresses for the owner(s) of this server.
-         Note: Missing or incorrect owner_email_address can affect your server list position.
+         The email addresses will not be publicly available, and only used by MTA administrators
+         to contact the server owner.
+         Note: Missing or incorrect owner_email_address can affect visibility in the master server list.
          Values: Comma separated list of email addresses -->
     <owner_email_address></owner_email_address>
 
@@ -81,7 +83,7 @@
 
     <!-- This parameter specifies if/when the <minclientversion> setting is automatically updated.
          Keeping <minclientversion> updated can help reduce cheating.
-         Note: The instant setting (2) is only recommened for competitive servers.
+         Note: The instant setting (2) is only recommended for competitive servers.
          Values: 0 - disabled, 1 - enabled (delayed by a few days), 2 - enabled (instant) ; default value: 1.  -->
     <minclientversion_auto_update>1</minclientversion_auto_update>
 
@@ -235,15 +237,15 @@
          Login attempts to a protected account from a second serial are blocked until the serial is manually authorized via
          the authserial command.
          For more info see: https://mtasa.com/authserial
-         Note: Disabling auth_serial_groups can affect your server list position.
+         Note: This is security critical feature and disabling auth_serial_groups can affect visibility in the master server list.
          Values: Comma separated list of ACL groups.  Default - Admin -->
     <auth_serial_groups>Admin</auth_serial_groups>
 
     <!-- This parameter specifies if the authorized serial login checks should also apply to the http interface.
          Protected account login attempts to the http interface will only succeed if the IP address matches one
          recently used by the account holder in-game
          For more info see: https://mtasa.com/authserialhttp
-         Note: Disabling auth_serial_http can affect your server list position.
+         Note: This is security critical feature and disabling auth_serial_http can affect visibility in the master server list.
          Values: 0 - Off, 1 - Enabled.  Default - 1 -->
     <auth_serial_http>1</auth_serial_http>