ircd-hybrid-7.2/etc/example.conf.quick.in

/* doc/example.conf.quick - ircd-hybrid-7 Example configuration file
 * Copyright (C) 2000-2005 Hybrid Development Team
 *
 * Written by ejb, wcampbel, db, leeh and others
 *
 * $Id$
 */

/* IMPORTANT NOTES:
 *
 * auth {} blocks MUST be specified in order of precedence.  The first one
 * that matches a user will be used.  So place spoofs first, then specials,
 * then general access, then restricted.
 *
 * Both shell style (#) and C style comments are supported.
 *
 * Files may be included by either:
 *        .include "filename"
 *        .include <filename>
 *
 * Times/durations are written as:
 *        12 hours 30 minutes 1 second
 *        
 * Valid units of time:
 *        month, week, day, hour, minute, second
 *
 * Valid units of size:
 *        megabyte/mbyte/mb, kilobyte/kbyte/kb, byte
 *
 * Sizes and times may be singular or plural.  
 */ 

/* EFNET NOTE:
 * 
 * This config file is NOT suitable for EFNet.  EFNet admins should use
 * example.efnet.conf
 */
 
serverinfo {
        name = "hades.arpa";
        sid = "_CHANGE_ME_";
        description = "hybrid-7 test server";
        network_name = "MyNet";
        network_desc = "This is My Network";
        hub = no;
        #vhost = "192.169.0.1";
        #vhost6 = "3ffe:80e8:546::2";
        max_clients = 512;
        #rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
        #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
};

/* admin {}: contains admin information about the server. (OLD A:) */
admin {
        name = "Smurf target";
        description = "Main Server Administrator";
        email = "<syn@packets.r.us>";
};

/* logging {}: contains information about logfiles. */
logging {
        use_logging = yes;
        fuserlog = "logs/userlog";
        foperlog = "logs/operlog";
        ffailed_operlog = "logs/foperlog";
        log_level = L_INFO;
};

/* class {}: contain information about classes for users (OLD Y:) */
class {
        name = "users";
        ping_time = 2 minutes;
        number_per_ip = 2;
        max_number = 100;
        sendq = 100 kbytes;
};

class {
        name = "restricted";
        ping_time = 1 minute 30 seconds;
        number_per_ip = 1;
        max_number = 100;
        sendq = 60kb;
};

class {
        name = "opers";
        ping_time = 5 minutes;
        number_per_ip = 10;
        max_number = 100;
        sendq = 100kbytes;
};

class {
        name = "server";
        ping_time = 5 minutes;
        ping_warning = 15 seconds;
        connectfreq = 5 minutes;
        max_number = 1;
        sendq=2 megabytes;
};

/* listen {}: contain information about the ports ircd listens on (OLD P:) */
listen {
        port = 6665 .. 6669;

        flags = ssl;
        port = 6697;

        host = "1.2.3.4";
        port = 7000, 7001;

        host = "3ffe:1234:a:b:c::d";
        port = 7002;
};

/* auth {}: allow users to connect to the ircd (OLD I:) */
auth {
        user = "*@172.16.0.0/12";
        user = "*test@123D:B567:*";
        password = "letmein";
        flags = need_password, spoof_notice, exceed_limit, kline_exempt,
                gline_exempt, no_tilde;
        spoof = "I.still.hate.packets";
        class = "opers";
};

auth {
        redirserv = "irc.fi";
        redirport = 6667;
        user = "*.fi";
        class = "users";
};

auth {
        user = "*@*";
        class = "users";
        flags = need_ident;
};

/* operator {}: defines ircd operators. (OLD O:)
 * ircd-hybrid no longer supports local operators, privileges are
 * controlled via flags.
 */
operator {
        name = "god";
        user = "*god@*";
        user = "*@127.0.0.1";
        password = "etcnjl8juSU1E";
        encrypted = yes;
        #rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
        class = "opers";
        flags = global_kill, remote, kline, unkline, gline,
                xline, die, rehash, nick_changes, admin;
};

/* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
connect {
        name = "irc.uplink.com";
        host = "192.168.0.1";
        send_password = "password";
        accept_password = "anotherpassword";
        encrypted = no;
        port = 6666;
        hub_mask = "*";
        #leaf_mask = "*.uk";
        class = "server";
        flags = autoconn;
        #fakename = "*.arpa";
};

connect {
        name = "encrypted.auth.example";
        host = "some.host.somewhere";
        port = 6667;

        flags = cryptlink;
        rsa_public_key_file = "etc/remote.server.keyfile";
        #cipher_preference = "BF/168";
};

connect {
        name = "ipv6.some.server";
        host = "3ffd:dead:beef::1";
        send_password = "password";
        accept_password = "password";
        port = 6666;

        aftype = ipv6;
        class = "server";
};

/* cluster{}: servers that share klines/unkline/xline/unxline/resv/unresv/locops
 * automatically (OLD hyb6 SLAVE_SERVERS)
 */
cluster {
        /* name: the server to share with, this can take wildcards */
        /* NOTE: only local actions will be clustered, meaning if
         *       the server receives a shared kline/unkline/etc, it
         *       will not be propagated to clustered servers.
         */
        name = "*.arpa";
        
        /* type: list of what to share, options are as follows:
         *      kline   - share klines
         *      unkline - share unklines
         *      xline   - share xlines
         *      unxline - share unxlines
         *      resv    - share resvs
         *      unresv  - share unresvs
         *      locops  - share locops
         *      all     - share all of the above
         */
        type = kline, unkline, locops, xline, resv;
};

/* shared {}: users that are allowed to remote kline (OLD U:) */
shared {
        name = "irc2.some.server";
        user = "oper@my.host.is.spoofed";
        type = all;
};

/* kill {}: users that are not allowed to connect (OLD K:)
 * Oper issued klines will be added to the specified kline config
 */
kill {
        user = "bad@*.hacked.edu";
        reason = "Obviously hacked account";
};

/* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
 * Oper issued dlines will be added to the specified dline config
 */
deny {
        ip = "10.0.1.0/24";
        reason = "Reconnecting vhosted bots";
};

/* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) */
exempt {
        ip = "192.168.0.0/16";
};

/* resv {}: nicks and channels users may not use/join (OLD Q:) */
resv {
        nick = "nickserv";
        nick = "chanserv";
        channel = "#services";
        reason = "Clone bots";
        nick = "clone*";
};

gecos {
        name = "*sex*";
        reason = "Possible spambot";
};

gecos {
        name = "sub7server";
        reason = "Trojan drone";
};

gecos {
        name = "*http*";
        reason = "Spambot";
};

channel {
        restrict_channels = no;
        disable_local_channels = no;
        use_invex = yes;
        use_except = yes;
        use_knock = yes;
        knock_delay = 5 minutes;
        knock_delay_channel = 1 minute;
    burst_topicwho = yes;
        max_chans_per_user = 15;
        quiet_on_ban = yes;
        max_bans = 25;
        join_flood_count = 16;
        join_flood_time = 8 seconds;
        default_split_user_count = 0;
        default_split_server_count = 0;
        no_create_on_split = yes;
        no_join_on_split = no;
};

serverhide {
        flatten_links = no;
        links_delay = 5 minutes;
        hidden = no;
        disable_hidden = no;
        hide_servers = no;
        hidden_name = "*.hidden.com";
        hide_server_ips = no;
};

general {
        kill_chase_time_limit = 90;
        hide_spoof_ips = yes;
        ignore_bogus_ts = no;

        disable_auth = no;
        disable_remote_commands = no;
        default_floodcount = 10;
        failed_oper_notice = yes;
        dots_in_ident=2;
        dot_in_ip6_addr = yes;
        min_nonwildcard = 4;
        min_nonwildcard_simple = 3;
        max_accept = 20;
        anti_nick_flood = yes;

        max_nick_time = 20 seconds;
        max_nick_changes = 5;

        anti_spam_exit_message_time = 5 minutes;
        ts_warn_delta = 30 seconds;
        ts_max_delta = 5 minutes;

        kline_with_reason = yes;
        kline_with_connection_closed = no;
        reject_hold_time = 0;

        invisible_on_connect = yes;
        warn_no_nline = yes;
        stats_o_oper_only=yes;
        stats_P_oper_only=no;
        stats_i_oper_only=masked;
        stats_k_oper_only=masked;
        caller_id_wait = 1 minute;
        pace_wait_simple = 1 second;
        pace_wait = 10 seconds;
        short_motd = no;
        ping_cookie = no;
        no_oper_flood = yes;
        true_no_oper_flood = yes;
        oper_pass_resv = yes;
        idletime = 0;
        /* REMOVE ME.  The following line checks you've been reading. */
        havent_read_conf = 1;

        max_targets = 4;
        client_flood = 2560;
        message_locale = "standard";
        oper_only_umodes = bots, cconn, debug, full, skill, nchange, 
                     rej, spy, external, operwall, locops, unauth;

        oper_umodes = bots, locops, servnotice, operwall, wallop;


        #servlink_path = "/usr/local/ircd/bin/servlink";
        #default_cipher_preference = "BF/168";
        #use_egd = yes;
        #egdpool_path = "/var/run/egd-pool";
        #compression_level = 6;
        throttle_time = 10;
};

glines {
        enable = yes;
        duration = 1 day;
        logging = reject;

        user = "god@I.still.hate.packets";
        name = "hades.arpa";      
        action = reject, block;

        user = "god@*"; 
        name = "*";
        action = block;
};

modules {
        path = "@LIBDIR@/modules";
        path = "@LIBDIR@/modules/autoload";
        #module = "some_module.so";
};
Revision:	912
Committed:	Wed Nov 7 22:47:44 2007 UTC (16 years, 5 months ago) by michael
File size:	8597 byte(s)
Log Message:	- Implemented libtool-ltdl. Only shared modules are supported currently - Several build fixes and cleanups. ircd now builds and runs without any problems - Added back all files to SVN that are needed to built the daemon I really don't want to force other people that want to test the snapshots or svn versions to install yyacc, lex, automake, autoconf and libtool... No problem having required files in svn - Removed some automake maintainer stuff which is kinda useless for us
#	User	Rev	Content
1	db	897	/* doc/example.conf.quick - ircd-hybrid-7 Example configuration file
2			* Copyright (C) 2000-2005 Hybrid Development Team
3			*
4			* Written by ejb, wcampbel, db, leeh and others
5			*
6			* $Id$
7			*/
8
9			/* IMPORTANT NOTES:
10			*
11			* auth {} blocks MUST be specified in order of precedence. The first one
12			* that matches a user will be used. So place spoofs first, then specials,
13			* then general access, then restricted.
14			*
15			* Both shell style (#) and C style comments are supported.
16			*
17			* Files may be included by either:
18			* .include "filename"
19			* .include <filename>
20			*
21			* Times/durations are written as:
22			* 12 hours 30 minutes 1 second
23			*
24			* Valid units of time:
25			* month, week, day, hour, minute, second
26			*
27			* Valid units of size:
28			* megabyte/mbyte/mb, kilobyte/kbyte/kb, byte
29			*
30			* Sizes and times may be singular or plural.
31			*/
32
33			/* EFNET NOTE:
34			*
35			* This config file is NOT suitable for EFNet. EFNet admins should use
36			* example.efnet.conf
37			*/
38
39			serverinfo {
40			name = "hades.arpa";
41			sid = "_CHANGE_ME_";
42			description = "hybrid-7 test server";
43			network_name = "MyNet";
44			network_desc = "This is My Network";
45			hub = no;
46			#vhost = "192.169.0.1";
47			#vhost6 = "3ffe:80e8:546::2";
48			max_clients = 512;
49			#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
50			#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
51			};
52
53			/* admin {}: contains admin information about the server. (OLD A:) */
54			admin {
55			name = "Smurf target";
56			description = "Main Server Administrator";
57			email = "<syn@packets.r.us>";
58			};
59
60			/* logging {}: contains information about logfiles. */
61			logging {
62			use_logging = yes;
63			fuserlog = "logs/userlog";
64			foperlog = "logs/operlog";
65			ffailed_operlog = "logs/foperlog";
66			log_level = L_INFO;
67			};
68
69			/* class {}: contain information about classes for users (OLD Y:) */
70			class {
71			name = "users";
72			ping_time = 2 minutes;
73			number_per_ip = 2;
74			max_number = 100;
75			sendq = 100 kbytes;
76			};
77
78			class {
79			name = "restricted";
80			ping_time = 1 minute 30 seconds;
81			number_per_ip = 1;
82			max_number = 100;
83			sendq = 60kb;
84			};
85
86			class {
87			name = "opers";
88			ping_time = 5 minutes;
89			number_per_ip = 10;
90			max_number = 100;
91			sendq = 100kbytes;
92			};
93
94			class {
95			name = "server";
96			ping_time = 5 minutes;
97			ping_warning = 15 seconds;
98			connectfreq = 5 minutes;
99			max_number = 1;
100			sendq=2 megabytes;
101			};
102
103			/* listen {}: contain information about the ports ircd listens on (OLD P:) */
104			listen {
105			port = 6665 .. 6669;
106
107			flags = ssl;
108			port = 6697;
109
110			host = "1.2.3.4";
111			port = 7000, 7001;
112
113			host = "3ffe:1234:a:b:c::d";
114			port = 7002;
115			};
116
117			/* auth {}: allow users to connect to the ircd (OLD I:) */
118			auth {
119			user = "*@172.16.0.0/12";
120			user = "test@123D:B567:";
121			password = "letmein";
122			flags = need_password, spoof_notice, exceed_limit, kline_exempt,
123			gline_exempt, no_tilde;
124			spoof = "I.still.hate.packets";
125			class = "opers";
126			};
127
128			auth {
129			redirserv = "irc.fi";
130			redirport = 6667;
131			user = "*.fi";
132			class = "users";
133			};
134
135			auth {
136			user = "@";
137			class = "users";
138			flags = need_ident;
139			};
140
141			/* operator {}: defines ircd operators. (OLD O:)
142			* ircd-hybrid no longer supports local operators, privileges are
143			* controlled via flags.
144			*/
145			operator {
146			name = "god";
147			user = "god@";
148			user = "*@127.0.0.1";
149			password = "etcnjl8juSU1E";
150			encrypted = yes;
151			#rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
152			class = "opers";
153			flags = global_kill, remote, kline, unkline, gline,
154			xline, die, rehash, nick_changes, admin;
155			};
156
157			/* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
158			connect {
159			name = "irc.uplink.com";
160			host = "192.168.0.1";
161			send_password = "password";
162			accept_password = "anotherpassword";
163			encrypted = no;
164			port = 6666;
165			hub_mask = "*";
166			#leaf_mask = "*.uk";
167			class = "server";
168			flags = autoconn;
169			#fakename = "*.arpa";
170			};
171
172			connect {
173			name = "encrypted.auth.example";
174			host = "some.host.somewhere";
175			port = 6667;
176
177			flags = cryptlink;
178			rsa_public_key_file = "etc/remote.server.keyfile";
179			#cipher_preference = "BF/168";
180			};
181
182			connect {
183			name = "ipv6.some.server";
184			host = "3ffd:dead:beef::1";
185			send_password = "password";
186			accept_password = "password";
187			port = 6666;
188
189			aftype = ipv6;
190			class = "server";
191			};
192
193			/* cluster{}: servers that share klines/unkline/xline/unxline/resv/unresv/locops
194			* automatically (OLD hyb6 SLAVE_SERVERS)
195			*/
196			cluster {
197			/* name: the server to share with, this can take wildcards */
198			/* NOTE: only local actions will be clustered, meaning if
199			* the server receives a shared kline/unkline/etc, it
200			* will not be propagated to clustered servers.
201			*/
202			name = "*.arpa";
203
204			/* type: list of what to share, options are as follows:
205			* kline - share klines
206			* unkline - share unklines
207			* xline - share xlines
208			* unxline - share unxlines
209			* resv - share resvs
210			* unresv - share unresvs
211			* locops - share locops
212			* all - share all of the above
213			*/
214			type = kline, unkline, locops, xline, resv;
215			};
216
217			/* shared {}: users that are allowed to remote kline (OLD U:) */
218			shared {
219			name = "irc2.some.server";
220			user = "oper@my.host.is.spoofed";
221			type = all;
222			};
223
224			/* kill {}: users that are not allowed to connect (OLD K:)
225			* Oper issued klines will be added to the specified kline config
226			*/
227			kill {
228			user = "bad@*.hacked.edu";
229			reason = "Obviously hacked account";
230			};
231
232			/* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
233			* Oper issued dlines will be added to the specified dline config
234			*/
235			deny {
236			ip = "10.0.1.0/24";
237			reason = "Reconnecting vhosted bots";
238			};
239
240			/* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) */
241			exempt {
242			ip = "192.168.0.0/16";
243			};
244
245			/* resv {}: nicks and channels users may not use/join (OLD Q:) */
246			resv {
247			nick = "nickserv";
248			nick = "chanserv";
249			channel = "#services";
250			reason = "Clone bots";
251			nick = "clone*";
252			};
253
254			gecos {
255			name = "sex";
256			reason = "Possible spambot";
257			};
258
259			gecos {
260			name = "sub7server";
261			reason = "Trojan drone";
262			};
263
264			gecos {
265			name = "http";
266			reason = "Spambot";
267			};
268
269			channel {
270			restrict_channels = no;
271			disable_local_channels = no;
272			use_invex = yes;
273			use_except = yes;
274			use_knock = yes;
275			knock_delay = 5 minutes;
276			knock_delay_channel = 1 minute;
277			burst_topicwho = yes;
278			max_chans_per_user = 15;
279			quiet_on_ban = yes;
280			max_bans = 25;
281			join_flood_count = 16;
282			join_flood_time = 8 seconds;
283			default_split_user_count = 0;
284			default_split_server_count = 0;
285			no_create_on_split = yes;
286			no_join_on_split = no;
287			};
288
289			serverhide {
290			flatten_links = no;
291			links_delay = 5 minutes;
292			hidden = no;
293			disable_hidden = no;
294			hide_servers = no;
295			hidden_name = "*.hidden.com";
296			hide_server_ips = no;
297			};
298
299			general {
300			kill_chase_time_limit = 90;
301			hide_spoof_ips = yes;
302			ignore_bogus_ts = no;
303
304			disable_auth = no;
305			disable_remote_commands = no;
306			default_floodcount = 10;
307			failed_oper_notice = yes;
308			dots_in_ident=2;
309			dot_in_ip6_addr = yes;
310			min_nonwildcard = 4;
311			min_nonwildcard_simple = 3;
312			max_accept = 20;
313			anti_nick_flood = yes;
314
315			max_nick_time = 20 seconds;
316			max_nick_changes = 5;
317
318			anti_spam_exit_message_time = 5 minutes;
319			ts_warn_delta = 30 seconds;
320			ts_max_delta = 5 minutes;
321
322			kline_with_reason = yes;
323			kline_with_connection_closed = no;
324			reject_hold_time = 0;
325
326			invisible_on_connect = yes;
327			warn_no_nline = yes;
328			stats_o_oper_only=yes;
329			stats_P_oper_only=no;
330			stats_i_oper_only=masked;
331			stats_k_oper_only=masked;
332			caller_id_wait = 1 minute;
333			pace_wait_simple = 1 second;
334			pace_wait = 10 seconds;
335			short_motd = no;
336			ping_cookie = no;
337			no_oper_flood = yes;
338			true_no_oper_flood = yes;
339			oper_pass_resv = yes;
340			idletime = 0;
341			/* REMOVE ME. The following line checks you've been reading. */
342			havent_read_conf = 1;
343
344			max_targets = 4;
345			client_flood = 2560;
346			message_locale = "standard";
347			oper_only_umodes = bots, cconn, debug, full, skill, nchange,
348			rej, spy, external, operwall, locops, unauth;
349
350			oper_umodes = bots, locops, servnotice, operwall, wallop;
351
352
353			#servlink_path = "/usr/local/ircd/bin/servlink";
354			#default_cipher_preference = "BF/168";
355			#use_egd = yes;
356			#egdpool_path = "/var/run/egd-pool";
357			#compression_level = 6;
358			throttle_time = 10;
359			};
360
361			glines {
362			enable = yes;
363			duration = 1 day;
364			logging = reject;
365
366			user = "god@I.still.hate.packets";
367			name = "hades.arpa";
368			action = reject, block;
369
370			user = "god@*";
371			name = "*";
372			action = block;
373			};
374
375			modules {
376	michael	912	path = "@LIBDIR@/modules";
377			path = "@LIBDIR@/modules/autoload";
378	db	897	#module = "some_module.so";
379			};
Name	Value
svn:eol-style	native
svn:keywords	"Author Date Id Revision"