# Parameters

## `default_allow_file` (string)

Default allow file used by functions without parameters. If you don't specify full pathname then the directory in which is the main config file is located will be used.

Default value is permissions.allow.

Set `default_allow_file` parameter

    ...
    modparam("permissions", "default_allow_file", "/etc/permissions.allow")
    ...

## `default_deny_file` (string)

Default file containing deny rules. The file is used by functions without parameters. If you don't specify full pathname then the directory in which the main config file is located will be used.

Default value is permissions.deny.

Set `default_deny_file` parameter

    ...
    modparam("permissions", "default_deny_file", "/etc/permissions.deny")
    ...

If both of the default file parameters are set to "" the module does not try to load them.

## `check_all_branches` (integer)

If set then allow_routing functions will check Request-URI of all branches (default). If disabled then only Request-URI of the first branch will be checked.

Do not disable this parameter unless you really know what you are doing.

Default value is 1.

Set `check_all_branches` parameter

    ...
    modparam("permissions", "check_all_branches", 0)
    ...

## `allow_suffix` (string)

Suffix to be appended to basename to create filename of the allow file when version with one parameter of either `allow_routing` or `allow_register` is used.

Including leading dot.

Default value is ".allow".

Set `allow_suffix` parameter

    ...
    modparam("permissions", "allow_suffix", ".allow")
    ...

## `deny_suffix` (string)

Suffix to be appended to basename to create filename of the deny file when version with one parameter of either `allow_routing` or `allow_register` is used.

Including leading dot.

Default value is ".deny".

Set `deny_suffix` parameter

    ...
    modparam("permissions", "deny_suffix", ".deny")
    ...

## `max_rule_files` (int)

Maximum number of allow/deny file pairs.

Default value is 64.

## `safe_file_load` (int)

Module initialization fails in case of a missing config file if safe_file_load is true.

Default value is 0 (false).

## `db_url` (string)

URL of the database to be used.

## `db_mode` (int)

Disables/enables database cache.

Default value is 0 (cache is disabled)

NOTE: ipmatch functions can operate only in cache mode, set db_mode to 1 if you want to use them.

## `ipmatch_table` (string)

Name of the table containing ipmatch entries.

Default value is "ipmatch".

## `declare_ipset` (string)

Declares name of ip set which can be manipulated via RPC commands and tested using `ip_is_trusted`. Identifier must start with letter or underscore.

IP mask may follow equal sign to initialize ipset on startup.