| 96 |
|
* Example command to store a 2048 bit RSA keypair in |
| 97 |
|
* rsa.key, and the public key in rsa.pub: |
| 98 |
|
* |
| 99 |
< |
* openssl genrsa -out rsa.key 2048 |
| 99 |
> |
* openssl genrsa -out rsa.key 2048 |
| 100 |
|
* openssl rsa -in rsa.key -pubout -out rsa.pub |
| 101 |
|
* chown <ircd-user>.<ircd.group> rsa.key rsa.pub |
| 102 |
|
* chmod 0600 rsa.key |
| 134 |
|
}; |
| 135 |
|
|
| 136 |
|
/* |
| 137 |
< |
* admin {}: contains admin information about the server. (OLD A:) |
| 137 |
> |
* admin {}: contains admin information about the server |
| 138 |
|
*/ |
| 139 |
|
admin { |
| 140 |
|
name = "Smurf target"; |
| 169 |
|
}; |
| 170 |
|
|
| 171 |
|
/* |
| 172 |
< |
* class {}: contains information about classes for users (OLD Y:) |
| 172 |
> |
* class {}: contains information about classes for users |
| 173 |
|
*/ |
| 174 |
|
class { |
| 175 |
|
/* name: the name of the class. classes are text now */ |
| 250 |
|
}; |
| 251 |
|
|
| 252 |
|
/* |
| 253 |
< |
* listen {}: contains information about the ports ircd listens on (OLD P:) |
| 253 |
> |
* listen {}: contains information about the ports ircd listens on |
| 254 |
|
*/ |
| 255 |
|
listen { |
| 256 |
|
/* |
| 273 |
|
* |
| 274 |
|
* ssl - Port is for SSL client connections only |
| 275 |
|
* server - Only server connections are permitted |
| 276 |
< |
* hidden - Port is hidden from /stats P |
| 276 |
> |
* hidden - Port is hidden from /stats P, unless you're an admin |
| 277 |
|
*/ |
| 278 |
|
flags = hidden, ssl; |
| 279 |
|
host = "192.168.0.1"; |
| 291 |
|
}; |
| 292 |
|
|
| 293 |
|
/* |
| 294 |
< |
* auth {}: allow users to connect to the ircd (OLD I:) |
| 294 |
> |
* auth {}: allow users to connect to the ircd |
| 295 |
|
*/ |
| 296 |
|
auth { |
| 297 |
|
/* |
| 320 |
|
class = "opers"; |
| 321 |
|
|
| 322 |
|
/* |
| 323 |
< |
* need_password: don't allow users who haven't supplied the correct |
| 324 |
< |
* password to connect using another auth{} block |
| 325 |
< |
* ('&' prefix on /stats I if disabled) |
| 326 |
< |
* need_ident: require the user to have identd to connect ('+' prefix on /stats I) |
| 327 |
< |
* spoof_notice: enable spoofing notification to admins |
| 328 |
< |
* exceed_limit: allow a user to exceed class limits ('>' prefix on /stats I) |
| 329 |
< |
* kline_exempt: exempt this user from k/glines ('^' prefix on /stats I) |
| 330 |
< |
* gline_exempt: exempt this user from glines ('_' prefix on /stats I) |
| 331 |
< |
* resv_exempt: exempt this user from resvs ('$' prefix on /stats I) |
| 332 |
< |
* no_tilde: remove ~ from a user with no ident ('-' prefix on /stats I) |
| 333 |
< |
* can_flood: allow this user to exceed flood limits ('|' prefix on /stats I) |
| 323 |
> |
* need_password - don't allow users who haven't supplied the correct |
| 324 |
> |
* password to connect using another auth{} block |
| 325 |
> |
* ('&' prefix on /stats I if disabled) |
| 326 |
> |
* need_ident - require the user to have identd to connect ('+' prefix on /stats I) |
| 327 |
> |
* spoof_notice - enable spoofing notification to admins |
| 328 |
> |
* exceed_limit - allow a user to exceed class limits ('>' prefix on /stats I) |
| 329 |
> |
* kline_exempt - exempt this user from k/glines ('^' prefix on /stats I) |
| 330 |
> |
* gline_exempt - exempt this user from glines ('_' prefix on /stats I) |
| 331 |
> |
* resv_exempt - exempt this user from resvs ('$' prefix on /stats I) |
| 332 |
> |
* no_tilde - remove ~ from a user with no ident ('-' prefix on /stats I) |
| 333 |
> |
* can_flood - allow this user to exceed flood limits ('|' prefix on /stats I) |
| 334 |
|
*/ |
| 335 |
|
flags = need_password, spoof_notice, exceed_limit, kline_exempt, |
| 336 |
|
gline_exempt, resv_exempt, no_tilde, can_flood; |
| 358 |
|
}; |
| 359 |
|
|
| 360 |
|
/* |
| 361 |
< |
* operator {}: defines ircd operators. (OLD O:) |
| 361 |
> |
* operator {}: defines ircd operators |
| 362 |
|
* |
| 363 |
|
* ircd-hybrid no longer supports local operators, privileges are |
| 364 |
|
* controlled via flags. |
| 434 |
|
* allowed to do on the server. All options default to no. |
| 435 |
|
* Available options: |
| 436 |
|
* |
| 437 |
< |
* module: allows MODLIST, MODRESTART, MODLOAD, MODUNLOAD |
| 438 |
< |
* global_kill: allows remote users to be /KILL'd |
| 439 |
< |
* remote: allows remote SQUIT and CONNECT |
| 440 |
< |
* remoteban: allows remote KLINE/UNKLINE |
| 441 |
< |
* kline: allows KILL, KLINE and DLINE |
| 442 |
< |
* unkline: allows UNKLINE and UNDLINE |
| 443 |
< |
* gline: allows GLINE |
| 444 |
< |
* xline: allows XLINE |
| 445 |
< |
* globops: allows GLOBOPS |
| 446 |
< |
* operwall: allows OPERWALL |
| 447 |
< |
* nick_changes: allows oper to see nickchanges |
| 448 |
< |
* via usermode +n |
| 449 |
< |
* rehash: allows oper to REHASH config |
| 450 |
< |
* die: allows DIE |
| 451 |
< |
* restart: allows RESTART |
| 452 |
< |
* admin: gives admin privileges. admins for example, |
| 453 |
< |
* may see the real IP addresses of servers. |
| 454 |
< |
* hidden_admin: same as 'admin', but noone can recognize you as |
| 455 |
< |
* being an admin |
| 456 |
< |
* hidden_oper: not shown in /stats p (except for other operators) |
| 437 |
> |
* module - allows MODLIST, MODRESTART, MODLOAD, MODUNLOAD |
| 438 |
> |
* global_kill - allows remote users to be /KILL'd |
| 439 |
> |
* remote - allows remote SQUIT and CONNECT |
| 440 |
> |
* remoteban - allows remote KLINE/UNKLINE |
| 441 |
> |
* kline - allows KILL, KLINE and DLINE |
| 442 |
> |
* unkline - allows UNKLINE and UNDLINE |
| 443 |
> |
* gline - allows GLINE |
| 444 |
> |
* xline - allows XLINE |
| 445 |
> |
* globops - allows GLOBOPS |
| 446 |
> |
* operwall - allows OPERWALL |
| 447 |
> |
* nick_changes - allows oper to see nickchanges via usermode +n |
| 448 |
> |
* rehash - allows oper to REHASH config |
| 449 |
> |
* die - allows DIE |
| 450 |
> |
* restart - allows RESTART |
| 451 |
> |
* admin - gives admin privileges. admins for example, |
| 452 |
> |
* may see the real IP addresses of servers. |
| 453 |
> |
* hidden_admin - same as 'admin', but noone can recognize you as |
| 454 |
> |
* being an admin |
| 455 |
> |
* hidden_oper - not shown in /stats p (except for other operators) |
| 456 |
|
*/ |
| 457 |
|
flags = global_kill, remote, kline, unkline, xline, globops, restart, |
| 458 |
|
die, rehash, nick_changes, admin, operwall, module; |
| 464 |
|
}; |
| 465 |
|
|
| 466 |
|
/* |
| 467 |
< |
* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) |
| 467 |
> |
* connect {}: controls servers we connect to |
| 468 |
|
*/ |
| 469 |
|
connect { |
| 470 |
|
/* name: the name of the server */ |
| 515 |
|
class = "server"; |
| 516 |
|
|
| 517 |
|
/* |
| 518 |
< |
* autoconn: controls whether we autoconnect to this server or not, |
| 519 |
< |
* dependent on class limits. By default, this is disabled. |
| 520 |
< |
* compressed: controls whether traffic is compressed via ziplinks. |
| 518 |
> |
* autoconn - controls whether we autoconnect to this server or not, |
| 519 |
> |
* dependent on class limits. By default, this is disabled. |
| 520 |
> |
* compressed - controls whether traffic is compressed via ziplinks. |
| 521 |
|
* By default, this is disabled |
| 522 |
< |
* cryptlink: enable full encryption for all data passing between our |
| 522 |
> |
* cryptlink - enable full encryption for all data passing between our |
| 523 |
|
* server and this link and rsa authentication. |
| 524 |
< |
* burst_away: This will send the /away string that users have set |
| 524 |
> |
* burst_away - This will send the /away string that users have set |
| 525 |
|
* on the server burst. Note this can be a lot of data |
| 526 |
|
* and slow down your server burst. |
| 527 |
< |
* topicburst: Send topics to this server during channel burst. Works |
| 527 |
> |
* topicburst - Send topics to this server during channel burst. Works |
| 528 |
|
* only if the server we are connecting to is capable |
| 529 |
|
* of TBURST/TB. |
| 530 |
|
*/ |
| 588 |
|
|
| 589 |
|
/* |
| 590 |
|
* cluster {}: servers that share klines/unkline/xline/unxline/resv/unresv/locops |
| 591 |
< |
* automatically (OLD hyb6 SLAVE_SERVERS) |
| 591 |
> |
* automatically |
| 592 |
|
*/ |
| 593 |
|
cluster { |
| 594 |
|
/* |
| 622 |
|
}; |
| 623 |
|
|
| 624 |
|
/* |
| 625 |
< |
* shared {}: users that are allowed to remote kline (OLD U:) |
| 625 |
> |
* shared {}: users that are allowed to remote kline |
| 626 |
|
* |
| 627 |
|
* NOTE: This can be effectively used for remote klines. |
| 628 |
|
* Please note that there is no password authentication |
| 661 |
|
}; |
| 662 |
|
|
| 663 |
|
/* |
| 664 |
< |
* kill {}: users that are not allowed to connect (OLD K:) |
| 664 |
> |
* kill {}: users that are not allowed to connect |
| 665 |
|
* Oper issued klines will be added to the specified kline config |
| 666 |
|
*/ |
| 667 |
|
kill { |
| 689 |
|
}; |
| 690 |
|
|
| 691 |
|
/* |
| 692 |
< |
* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) |
| 692 |
> |
* exempt {}: IPs that are exempt from deny {} and Dlines |
| 693 |
|
*/ |
| 694 |
|
exempt { |
| 695 |
|
ip = "192.168.0.0/16"; |
| 696 |
|
}; |
| 697 |
|
|
| 698 |
|
/* |
| 699 |
< |
* resv {}: nicks and channels users may not use/join (OLD Q:) |
| 699 |
> |
* resv {}: nicks and channels users may not use/join |
| 700 |
|
*/ |
| 701 |
|
resv { |
| 702 |
|
/* reason: the reason for the proceeding resv's */ |
