Newcs default config with explanations



<?xml version="1.0"?>
<!--

For setup-issues, look in readme.txt!
If there are other troubles, try different forums or irc channels around )

The configfile are NOT case-sensitive, and shouldnt care about dos/unix cr/lf.
-->

<newCSconfig>
<globals>
<!-- valid value for listening-ip are:
IPv4 adress of local interface. -->
<listening-ip>127.0.0.1</listening-ip>
</globals>
<readers name="Standard Phoenix on PC">
<device>
<!-- valid value for name are:
Any name of your choice, just to name the device for you to read. -->
<name>Phoenix on Com1</name>

<!-- valid value for type are:
phoenix, dbox, sci, dragon, sc8, mp35, smartreader, pcsc (for own binary) or infinity(for own binary). -->
<type>phoenix</type>

<!-- valid value for mhz are:
153(1.53mhz), 358(3.58mhz), 368(3,68Mhz), 450(4.5mhz), 536(5.36mhz), 600(6.00mhz), 715(7.15 mhz), 800(8.00mhz)
1000(10.00 mhz), 1071(10.71mhz), 1200 (12.00mhz), 1431(14.31 mhz), 1600 (16.00mhz)
This setting is now IMPORTANT, normal phoenix usually have 3.57mhz, and can usually be overclocked
to 6mhz. For the others you probably need extra crystal (be careful). -->
<mhz>368</mhz>

<!-- valid value for node are full path to device, f.ex /dev/tts/0,
/dev/sciX (for dreambox), /dev/cardreaderX (for dragon),
/dev/tts/USBX (for a usb2serial device).
COMx on Win32, COM1, COM2 etc.
For PC/SC this is just 0, 1 ,2 and so on (reader number) -->
<node>/dev/ttyUSB0</node>

<!-- valid value for infinity_number are number of device, if you have multiple, only used in infinity binary,
0, 1 ... -->
<infinity_number>0</infinity_number>

<!-- valid value for slot are:
0-7 (only used on Sc8). -->
<slot>0</slot>

<!-- valid value for parity are:
Odd, Even, None (ignored on sci and dragon).
This is only used on serial _BEFORE_ ATR is recieved. -->
<parity>none</parity>

<!-- valid value for reset are:
normal, inverse (ignored on sci and dragon).
normal is phoenix, inverse is smartmouse -->
<reset>normal</reset>

<!-- valid value for export are:
Yes,No - if not exported only localhost can connect. -->
<export>Yes</export>

<!-- valid value for enabled are:
Yes,No - if not enabled it cant be used. -->
<enabled>Yes</enabled>

<!-- valid value for blocksa are:
Yes, No - block shared address emm to card. -->
<blocksa>No</blocksa>

<!-- valid value for blockua are:
Yes, No - block unique address emm to card. -->
<blockua>No</blockua>

<!-- valid value for blockga are:
Yes, No - block group address emm to card. -->
<blockga>No</blockga>

<!-- valid value for blockC0 are:
Yes, No - block fake emm to card. -->
<blockC0>Yes</blockC0>

<!-- valid value for boxkey are:
The boxkey/boxid of your nagra/nds STB. -->
<!-- <boxkey>0000000000</boxkey> -->

<!-- valid value for rsa are:
The RSA key from your nagra STB. -->
<!-- <rsa>0000000000</rsa> -->

<!-- valid value for camkey are:
0 - Europe, 1 - Oz -->
<irdetomode>0</irdetomode>

<!-- valid value for irdeto-camkey are:
8byte hex. -->
<irdeto-camkey>0000000000000000</irdeto-camkey>

<!-- valid value for camkey-data are:
64byte hex -->
<irdeto-camkey-data>000000000000000000000000000000000000000000000 00000000000000000000000000000000 ​ 00000000000000000000000000000000000000000000000000 000000000000000000000000000000 ​ 00000000000000000000000000000000000000000000000000 000000000000000000000000000000 ​0000000000000000000</irdeto-camkey-data>

<!-- valid value for crypto-special are:
Yes, No - Used to enable/disable real-time mosc on Cryptoworks. -->
<crypto-special>No</crypto-special>

<!-- valid value for ipk are:
64byte hex -->
<ipk>000000000000000000000000000000000000000000000 00000000000000000000000000000000 ​ 00000000000000000000000000000000000000000000000000 000000000000000000000000000000 ​ 00000000000000000000000000000000000000000000000000 000000000000000000000000000000 ​0000000000000000000</ipk>

<!-- valid value for ucpk are:
64byte hex -->
<ucpk>00000000000000000000000000000000000000000000 000000000000000000000000000000000 ​ 00000000000000000000000000000000000000000000000000 000000000000000000000000000000 ​ 00000000000000000000000000000000000000000000000000 000000000000000000000000000000 ​0000000000000000000</ucpk>

<!-- valid value for PTShanshake are:
Yes, No - Used to enable/disable real-time HighBaud on Cryptoworks and Viacess. -->
<PTShandshake>No</PTShandshake>

<!-- valid value for carddetect are:
Yes, No - Used to try to detect if card is present in you cardreader. -->
<carddetect>yes</carddetect>

<!-- valid value for newcamd_port are:
0,65535 - Which port newcamd server will listen for incomming connections. -->
<newcamd_port>15050</newcamd_port>

<!-- valid value for autosid are:
Yes, No - Let NewCS decide which sids should be allowed/denied based on card answers. -->
<autosid>Yes</autosid>

<!-- valid value for Seca-PPV are:
Yes, No - Let NewCS decide which sids should be allowed/denied based on card answers. -->
<Seca-PPV>no</Seca-PPV>

<!-- valid value for Pincode are:
0000, 9999 - For f.ex PPV on Conax, also for parental lock on conax and cryptoworks. -->
<pincode>0000</pincode>

<!-- Notes about Service ID's:
There are some points worth mentioning:
1. If you allow a sid, all others will be rejected for that caid.
2. When you deny a sid, all others then the denied will be let through to that caid.
3. If you dont specify a reader, all sid's will get let through.
4. Put as many provider-sections in sid as you'd like, and as many id-sections under allow/deny as you want.
5. Deny is the stronger one, will always override allow.
6. If you want to add several sid's at once, do <id>0000:0010</id>, this will add all ten to list. -->
<sid>
<allow>
<!-- valid value for id are:
4 numbers, if the service id is 3 numbers, add a 0 infront of it. -->
<id>0000</id><id>0001</id><id>0002</id>
</allow>
<deny>
<!-- valid value for id are:
4 numbers, if the service id is 3 numbers, add a 0 infront of it. -->
<id>0000</id><id>0001</id><id>0002</id>
</deny>
</sid>
<!-- valid value for priority are:
hard, round, fifo - hard is lower userid, higher priority(gets ECM through before user with higher id),
round, there is an equal chance for all users to get ECM through, fifo, first sendt ECM gets through. -->
<priority>round</priority>
</device>
</readers>
<radegastserver>
<!-- valid value for enable are:
Yes, No - Enable or Disable radegast server. -->
<enabled>Yes</enabled>

<!-- valid value for port are:
0,65535 - Which port to listen for incomming connections. -->
<port>10001</port>

<allow>
<!-- valid value for hostname are:
all, IP-address or DNS-name. -->
<hostname>localhost</hostname>
</allow>
</radegastserver>
<cache>
<!-- valid value for emm are:
0-255 - Number of EMM's to cache. -->
<emm>20</emm>

<!-- valid value for ecm are:
0-255 - Number of ECM's to cache.
-1 - Dynamic ECM Cache. -->
<ecm>-1</ecm>
</cache>
<httpd>
<server> <!-- Port to accept connections on -->
<port>8080</port>
<enabled>yes</enabled>
</server>
<user>
<!-- valid value for userfile are:
Any username you'd like - Used for browser to logon (its case sensitive). -->
<name>newcs</name>

<!-- valid value for password are:
Any password you'd like - Used for browser to logon (its case sensitive). -->
<password>newcs</password>

<!-- valid value for accesslevel are:
admin, stats - Define what rights the user has in the web-console -->
<accesslevel>admin</accesslevel>
</user>
</httpd>
<debug>
<!-- valid value for password:
Max 25 characters and minimum 8, this is case-sensitive. -->
<password>NewCSpwd</password>

<!-- valid value for mode:
simple, advanced - Set TCP-Console to advanced mode to get access to
potentially dangerous features.-->
<mode>simple</mode>

<!-- valid value for level are:
normal, verbose, spam - How extensive debug should be. -->
<level>normal</level>

<!-- valid value for type are:
Init, general, ecm, emm, net, all - Section of debug that should be displayed. -->
<type>init</type>

<!-- valid value for output are:
Console, udp, tcp, file, all - Where to show debug. -->
<output>console,tcp</output>

<!-- console_options are so you can set own loglevel/type for console-logger:
Should hold level and type-tags like above. -->
<console_options>normal,init</console_options>

<!-- valid value for logfile are:
Path and filename - Where to write debug logs if file or all is chosed in output. -->
<logfile>/hdd/newcs.txt</logfile>

<!-- file_options are so you can set own loglevel/type for file-logger:
Should hold level and type-tags like above. -->
<file_options>spam,all</file_options>

<!-- valid value for udp_host are:
IP-address or DNS-name - Where to send debug if udp or all is chosed in output. -->
<udp_host>192.168.1.10</udp_host>

<!-- valid value for udp_port are:
0,65535 - Which port to send the udp packets. -->
<udp_port>1000</udp_port>

<!-- udp_options are so you can set own loglevel/type for udp-logger:
Should hold level and type-tags like above. -->
<udp_options>normal,init</udp_options>

<!-- valid value for tcp_port are:
0,65535 - Which port to listen for incomming tcp connections. -->
<tcp_port>1001</tcp_port>

<!-- tcp_options are so you can set own loglevel/type for tcp-logger:
Should hold level and type-tags like above. -->
<tcp_options>normal,init</tcp_options>
</debug>
<newcamdserver>
<!-- valid value for enabled are:
Yes, No - Enable or Disable newcamd server. -->
<enabled>Yes</enabled>

<!-- valid value for name are:
Any name - Used to identify server to remote clients,
if the remote client isnt newcamd, this field have no purpouse. -->
<name>newcs</name>

<!-- valid value for deskey are:
any 14x2 numbers - Used to encrypt the communication between
the client and the server. -->
<deskey>01 02 03 04 05 06 07 08 09 10 11 12 13 14</deskey>

<!-- Notes about users:
The first user doesnt have au without beeing it set to on (unlike newcamd cardserver).
You can add as many user-sections as you want, just put them under eachother. -->
<user>
<!-- valid value for userfile are:
Any username you'd like - Used for client to logon (its case sensitive). -->
<name>dummy</name>

<!-- valid value for password are:
Any password you'd like - Used for client to logon (its case sensitive). -->
<password>dummy</password>

<!-- valid value for hostname are:
IP-address or DNS-name - Used for reverse login to the client. -->
<hostname>localhost</hostname>

<!-- valid value for port are:
0-65535 - Which port reverse login to the client. -->
<port>12000</port>

<!-- valid value for au are:
On,Off - Wheather the client are allowed to send EMM to the server. -->
<au>on</au>

<!-- valid value for sidoverride are:
On,Off - Wheather the client are allowed to override the SID-filter. -->
<sidoverride>off</sidoverride>

<!-- valid value for readers are device name,
if one <allow> present, other readers will be disabled! -->
<readers>
<allow>Phoenix on Com1</allow>
</readers>

<!-- valid value for spider are:
Yes,No - Wheather the client are allowed to be newcamd Cardspider. -->
<spider>No</spider>

<!-- valid value for rate are:
1-60 - number of seconds between each ecm -->
<rate>2</rate>

<!-- valid value for cardlevel are:
1 - If its set Mgcamd will use all cards over the same port. -->
<cardlevel>1</cardlevel>
</user>
</newcamdserver>
<chameleon2>
<server>
<!-- valid value for tcp_port are:
0,65535 - Which port to listen for incomming tcp connections. -->
<port>1234</port>
<!-- enable or disable the server, valid values are yes/no -->
<enabled>yes</enabled>

<!-- What Realm server will report to clients -->
<realm>myShares</realm>
</server>
<peer> <!-- Connect to remote Chamelon server with the below credentials -->
<hostname>localhost</hostname>
<!-- valid value for tcp_port are:
0,65535 - Which port to listen for incomming tcp connections. -->
<port>1234</port>
<!-- valid value for userfile are:
Any username you'd like - Used for client to logon (its case sensitive). -->
<name>myname</name>
<!-- valid value for password are:
Any password you'd like - Used for client to logon (its case sensitive). -->
<password>mypassword</password>

<!-- What Realm client has access to on server -->
<realm>myShares</realm>
</peer>
<user>
<!-- valid value for name are:
Any username you'd like - Used for client to logon (its case sensitive). -->
<name>myname</name>
<!-- valid value for password are:
Any password you'd like - Used for client to logon (its case sensitive). -->
<password>mypassword</password>
<!-- Not yet implemented, this will be how chameleon will connect to more than one network -->
<realm>myShares</realm>
</user>
<virtualcards>
<!-- valid value for virtualcards are:
A list of caid and provider id to add to the default list in chameleon2 -->
<vc>
<caid>0000</caid>
<provider>0000000</provider>
</vc>
</virtualcards>
</chameleon2>
</newCSconfig>