Kunnskapsbase

By Default when TeamSpeak is first started it starts with all the defaults. Most users like to have the extra security and features that are possible with TeamSpeak 3. These are possibly by using a customized configuration file.

First as always we need to update everything and install the packages we'll be using in this guide. Just use the following command to update your server and install nano (a text editor)

For Almalinux:

dnf -y update && dnf -y install nano

For Debian/Ubuntu:

apt-get update && apt-get upgrade && apt-get install nano

To use the INI file you would simply make a file called ts3server.ini that is owned by TeamSpeak 3 user in your TeamSpeak 3 server directory and fill it with the INI information. You can do that with the following commands:

touch /home/ts3/teamspeak3-server_linux_amd64/ts3server.ini
chown ts3:ts3 /home/ts3/teamspeak3-server_linux_amd64/ts3server.ini
nano /home/ts3/teamspeak3-server_linux_amd64/ts3server.ini

Below is a good example of an INI file that is generated.

machine_id=
default_voice_port=9987
voice_ip=192.168.1.0,0:0:0:0:0:0:0:1
licensepath=
filetransfer_port=30033
filetransfer_ip=192.168.1.0,0:0:0:0:0:0:0:1
query_port=10011
query_ip=192.168.1.0,0:0:0:0:0:0:0:1
query_ip_whitelist=query_ip_whitelist.txt
query_ip_blacklist=query_ip_blacklist.txt
dbplugin=ts3db_sqlite3
dbpluginparameter=
dbsqlpath=sql/
dbsqlcreatepath=create_sqlite/
dbconnections=10
logpath=logs
logquerycommands=0
dbclientkeepdays=90
logappend=1

You would have to replace the IPv4 address of 192.168.1.0 to be the dedicated IPv4 address that you were given when you purchased and replace the IPv6 0:0:0:0:0:0:0:1 with the IPv6 address you also received when you purchased. Please note that IPv6 is only supported in TeamSpeak 3.0.13 and later and that IP addresses must be separated by a comma (,)

What each item in the INI represents.

machine_id=

The ID of the server if in a group. You should leave this blank

default_voice_port=9987

When a new virtual server is made on the installation what is the starting port. This tells the server what the starting port is meaning that the first virtual server will be set up on port 9987 and the next one 9988 and then 9989 and so on. Please note that our DDoS protection only allows for 9987 through so if you want additional ports opened for additional servers you can do that with the DDoS customization addon.

voice_ip=192.168.1.0,0:0:0:0:0:0:0:1

This is a list of the IP addresses that TeamSpeak will listen on. This is useful if you want TeamSpeak to only listen on 1 IP instead of all IP addresses.

licensepath=

This is the path to your license file. By default it is the same directory as your TeamSpeak 3 server so you should leave this blank and if you have a TeamSpeak 3 license place it in your server directory.

filetransfer_port=30033

When your users upload and download files using the filebrowser functions of TeamSpeak this is the port that it will communicate on. You can change this port for a slight security boost against automated bots, but human users can still find the port easily.

filetransfer_ip=192.168.1.0,0:0:0:0:0:0:0:1

This is a list of the IP addresses that TeamSpeak will listen on for file transfers. This is useful if you want TeamSpeak to only listen on 1 IP for file transfers instead of all IP addresses. Having an IP for file transfers, one for query and one for voice can help security wise and improve the narrowing issues with one IP or another.

query_port=10011

The query port is the most sought after by bots and other malicious scripts. Changing this port to something besides 10011 has some major security benefits since almost all automated hacking machines will quit when 10011 isn't responding. You'll see a lot less attempts to hack your query with a different port.

query_ip=192.168.1.0,0:0:0:0:0:0:0:1

Just like above, this is a list of the IP addresses that TeamSpeak will listen on for server query. This is useful if you want TeamSpeak to only listen on 1 IP for queries instead of all IP addresses. Having an IP for file transfers, one for query and one for voice can help security wise and improve the narrowing issues with one IP or another.

query_ip_whitelist=query_ip_whitelist.txt

This tells the server where the file is for your whitelist. A list of IP addresses that have unrestricted access to the server. WARNING: DO NOT add any IP addresses that you don't explicitly trust since it is giving that IP unrestricted access to the server.

query_ip_blacklist=query_ip_blacklist.txt

The file location for your blacklist a place where no matter what that IP can't connect to server query even after a server restart.

dbplugin=ts3db_sqlite3
dbpluginparameter=
dbsqlpath=sql/
dbsqlcreatepath=create_sqlite/
dbconnections=10

These are options for the TeamSpeak 3 database. We highly suggest you just leave these as they are. It is possible to use MYSQL for your TeamSpeak 3 database but it takes additional resources with minimal benefit. The default is much better in almost every way.

logpath=logs

The location of the folder where you want all of the log files to be written. By default it places them in the logs directory inside of your server installation directory.

logquerycommands=0

If you change this to 1 it will log every query command that is sent to the server. This can help if you are running into issues with your server but should only be enabled temporarily as it will take up a massive amount of space in your logs so it should be set to 0 most of the time.

dbclientkeepdays=90

This is the amount of days that the server will keep user's unused identities. If you have added someone to a group they won't be pruned but guests will be.

logappend=1

When this is set to 0 Every time that your server restarts it will create a new logfile. After a long time it can result in hundreds of files that you have to sort through and it gets quite annoying. If you set this to 1 then it will add all new log entries into the same file we suggest leaving it as 1 since it will make your life easier when looking at logs.

Please note that when listing your dedicated IP addresses in the INI file you should always have at least an IPv4 address to make sure there is maximum compatibility. The same can be said for IPv6 since more and more Internet Service providers are using just IPv6. We would suggest for maximum performance and capability that there is at least 1 IPv4 and 1 IPv6 in each IP field.

How to start your server using your INI file

Starting your server with the ini script is pretty straight forward depending on how you want to start it. There are two choices.
Edit the ts3server_startscript.sh and replace the COMMANDLINE_PARAMETERS="${2}" line with COMMANDLINE_PARAMETERS="inifile=ts3server.ini" save and then run the following commands

su ts3
./ts3server_startscript.sh start

Or

su ts3
./ts3server_minimal_runscript.sh inifile=ts3server.ini &

Then press ctrl+c to get back to the command line