ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid-8/doc/example.efnet.conf

Comparing:
ircd-hybrid-8/etc/example.efnet.conf (file contents), Revision 1249 by michael, Sat Oct 1 10:07:53 2011 UTC vs.
ircd-hybrid-8/doc/example.efnet.conf (file contents), Revision 1324 by michael, Fri Mar 30 21:40:38 2012 UTC

#	Line 128 | Line 128 | serverinfo {
128		*/
129		#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
130
131	+	#ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
132	+
133	+	/*
134	+	* ssl_cipher_list:
135	+	*
136	+	* List of ciphers that are supported by _this_ server. Can be used to enforce
137	+	* specific ciphers for incoming SSL/TLS connections.
138	+	* If a client (which also includes incoming server connections) isn't capable
139	+	* of any cipher listed below, the connection will be simply rejected.
140	+	*
141	+	* A list of supported ciphers can be obtained by running:
142	+	*
143	+	*      openssl ciphers -ssl3 -tls1 -v
144	+	*
145	+	* Multiple ciphers are separated by colons. The order of preference is from
146	+	* left to right.
147	+	*/
148	+	#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
149	+
150		/*
151		* ssl_server_protocol:
152		* SSL/TLS protocols we provide for incoming secure connections.
153		* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
154	<	* SSLv2 is not suppported. This cannot be changed at runtime.
154	>	* SSLv2 is not suppported.
155		*/
156	<	#ssl_server_protocol = sslv3, tlsv1;
156	>	#ssl_server_method = tlsv1, sslv3;
157	>	#ssl_client_method = tlsv1;
158		};
159
160		/*
#	Line 363 | Line 383 | auth {
383		*/
384		operator {
385		/* name: the name of the oper */
366	–	/* NOTE: operator "opername"{} is also supported */
386		name = "god";
387
388		/*
389	<	* user: the user@host required for this operator.  CIDR is not
390	<	* supported.  Multiple user="" lines are supported.
389	>	* user: the user@host required for this operator. Multiple
390	>	* user="" lines are supported.
391		*/
392	<	user = "*god@*";
393	<	user = "*@127.0.0.1";
392	>	user = "*god@192.168.0.0/16";
393	>	user = "*@127.0.0.0/8";
394
395		/*
396		* password: the password required to oper.  By default this will
#	Line 412 | Line 431 | operator {
431		* +f - full         - See I: line full notices
432		* +G - softcallerid - Server Side Ignore for users not on your channels
433		* +g - callerid     - Server Side Ignore (for privmsgs etc)
434	+	* +H - hidden       - Hides operator status to other users
435		* +i - invisible    - Not shown in NAMES or WHO unless you share a
436		*                     a channel
437	+	* +j - rej          - See rejected client notices
438		* +k - skill        - See server generated KILL messages
439		* +l - locops       - See LOCOPS messages
440		* +n - nchange      - See client nick changes
420	–	* +r - rej          - See rejected client notices
441		* +s - servnotice   - See general server notices
442		* +u - unauth       - See unauthorized client notices
443		* +w - wallop       - See server generated WALLOPS
#	Line 436 | Line 456 | operator {
456		* global_kill  - allows remote users to be /KILL'd
457		* remote       - allows remote SQUIT and CONNECT
458		* remoteban    - allows remote KLINE/UNKLINE
459	<	* kline        - allows KILL, KLINE and DLINE
460	<	* unkline      - allows UNKLINE and UNDLINE
459	>	* dline        - allows DLINE
460	>	* undline      - allows UNDLINE
461	>	* kline        - allows KILL, and KLINE
462	>	* unkline      - allows UNKLINE
463		* gline        - allows GLINE
464		* xline        - allows XLINE
465		* globops      - allows GLOBOPS
#	Line 448 | Line 470 | operator {
470		* restart      - allows RESTART
471		* admin        - gives admin privileges. admins for example,
472		*                may see the real IP addresses of servers.
451	–	* hidden_admin - same as 'admin', but noone can recognize you as
452	–	*                being an admin
453	–	* hidden_oper  - not shown in /stats p (except for other operators)
473		*/
474		flags = global_kill, remote, kline, unkline, xline, globops, restart,
475		die, rehash, nick_changes, admin, operwall, module;
#	Line 507 | Line 526 | connect {
526		/* class: the class this server is in */
527		class = "server";
528
529	+	#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
530	+
531		/*
532		* autoconn   - controls whether we autoconnect to this server or not,
533	<	*              dependent on class limits.  By default, this is disabled.
513	<	* compressed - controls whether traffic is compressed via ziplinks.
514	<	*              By default, this is disabled
515	<	* cryptlink  - enable full encryption for all data passing between our
516	<	*              server and this link and rsa authentication.
533	>	*              dependent on class limits. By default, this is disabled.
534		* burst_away - This will send the /away string that users have set
535	<	*              on the server burst.  Note this can be a lot of data
535	>	*              on the server burst. Note this can be a lot of data
536		*              and slow down your server burst.
537	<	* topicburst - Send topics to this server during channel burst.  Works
537	>	* topicburst - Send topics to this server during channel burst. Works
538		*              only if the server we are connecting to is capable
539		*              of TBURST/TB.
540	+	* ssl        - Initiates a TLS/SSL connection.
541		*/
542	<	#       flags = autoconn, compressed, cryptlink, burst_away, topicburst;
542	>	#       flags = autoconn, burst_away, topicburst;
543		};
544
545		connect {
546	<	name = "encrypted.auth.example";
529	<	host = "some.host.somewhere";
530	<	port = 6667;
531	<
532	<	flags = cryptlink;
533	<
534	<	/*
535	<	* rsa_public_key_file: the path to the public keyfile of the server.
536	<	* Used instead of passwords.
537	<	*/
538	<	rsa_public_key_file = "etc/remote.server.keyfile";
539	<
540	<	/*
541	<	* cipher preference: set the preferred cipher for this link
542	<	*
543	<	* Available ciphers are:
544	<	*      BF/168 BF/128 CAST/128 IDEA/128 RC5.16/128
545	<	*      RC5.12/128 RC5.8/128 3DES/168 DES/56
546	<	*
547	<	* NOTE:  Some ciphers may not be supported by your OpenSSL.
548	<	*        Check the output from 'configure' for available ciphers.
549	<	*
550	<	* NOTE2: To help you decide what cipher to use, tools/encspeed
551	<	*        will show you approximately how fast each cipher is.
552	<	*        However, blowfish is fast and secure, and is probably
553	<	*        a good default for most situations.
554	<	*
555	<	* NOTE3: Default if none is set is BF/128
556	<	*
557	<	* The cipher *MUST* be the same in both directions.  If you
558	<	* set a cipher preference, your uplink must set the same cipher,
559	<	* else it will not link.
560	<	*/
561	<	#       cipher_preference = "BF/168";
562	<	};
563	<
564	<	/*
565	<	* NOTE: Don't add an extra 'name=' entry if you use
566	<	* the connect "name"{} feature
567	<	*/
568	<	connect "ipv6.some.server" {
546	>	name = "ipv6.some.server";
547		host = "3ffd:dead:beef::1";
548		send_password = "password";
549		accept_password = "password";
#	Line 599 | Line 577 | cluster {
577
578		/*
579		* type: list of what to share, options are as follows:
580	+	*      dline   - share dlines
581	+	*      undline - share undlines
582		*      kline   - share klines
603	–	*      tkline  - share temporary klines
583		*      unkline - share unklines
584		*      xline   - share xlines
606	–	*      txline  - share temporary xlines
585		*      unxline - share unxlines
586		*      resv    - share resvs
609	–	*      tresv   - share temporary resvs
587		*      unresv  - share unresvs
588		*      locops  - share locops
589		*      all     - share all of the above (default)
#	Line 638 | Line 615 | shared {
615
616		/*
617		* type: list of what to share, options are as follows:
618	+	*      dline   - allow oper/server to dline
619	+	*      undline - allow oper/server to undline
620		*      kline   - allow oper/server to kline
642	–	*      tkline  - allow temporary klines
621		*      unkline - allow oper/server to unkline
622		*      xline   - allow oper/server to xline
645	–	*      txline  - allow temporary xlines
623		*      unxline - allow oper/server to unxline
624		*      resv    - allow oper/server to resv
648	–	*      tresv   - allow temporary resvs
625		*      unresv  - allow oper/server to unresv
626		*      locops  - allow oper/server to locops - only used for servers that cluster
627		*      all     - allow oper/server to do all of the above (default)
#	Line 958 | Line 934 | general {
934		invisible_on_connect = yes;
935
936		/*
961	–	* If you don't explicitly specify burst_away in your connect blocks, then
962	–	* they will default to the burst_away value below.
963	–	*/
964	–	burst_away = no;
965	–
966	–	/*
937		* Show "actually using host <ip>" on /whois when possible.
938		*/
939		use_whois_actually = yes;
#	Line 973 | Line 943 | general {
943		* automatically to switch for the current nick of that user.
944		*/
945		kill_chase_time_limit = 90 seconds;
946	<
946	>
947		/*
948		* If hide_spoof_ips is disabled, opers will be allowed to see the real
949		* IP of spoofed users in /trace etc. If this is defined they will be
#	Line 1197 | Line 1167 | general {
1167		* +f - full         - See I: line full notices
1168		* +G - softcallerid - Server Side Ignore for users not on your channels
1169		* +g - callerid     - Server Side Ignore (for privmsgs etc)
1170	+	* +H - hidden       - Hides operator status to other users
1171		* +i - invisible    - Not shown in NAMES or WHO unless you share a
1172		*                     a channel
1173	+	* +j - rej          - See rejected client notices
1174		* +k - skill        - See server generated KILL messages
1175		* +l - locops       - See LOCOPS messages
1176		* +n - nchange      - See client nick changes
1205	–	* +r - rej          - See rejected client notices
1177		* +s - servnotice   - See general server notices
1178		* +u - unauth       - See unauthorized client notices
1179		* +w - wallop       - See server generated WALLOPS
#	Line 1212 | Line 1183 | general {
1183		*/
1184
1185		/* oper_only_umodes: usermodes only opers may set */
1186	<	oper_only_umodes = bots, cconn, cconn_full, debug, full, skill,
1186	>	oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill,
1187		nchange, rej, spy, external, operwall,
1188		locops, unauth;
1189
#	Line 1220 | Line 1191 | general {
1191		oper_umodes = bots, locops, servnotice, operwall, wallop;
1192
1193		/*
1223	–	* servlink_path: path to 'servlink' program used by ircd to handle
1224	–	* encrypted/compressed server <-> server links.
1225	–	*
1226	–	* only define if servlink is not in same directory as ircd itself.
1227	–	*/
1228	–	#servlink_path = "/usr/local/ircd/bin/servlink";
1229	–
1230	–	/*
1231	–	* default_cipher_preference: default cipher to use for cryptlink when none is
1232	–	* specified in connect block.
1233	–	*/
1234	–	#default_cipher_preference = "BF/168";
1235	–
1236	–	/*
1194		* use_egd: if your system does not have *random devices yet you
1195		* want to use OpenSSL and encrypted links, enable this.  Beware -
1196		* EGD is *very* CPU intensive when gathering data for its pool
#	Line 1246 | Line 1203 | general {
1203		*/
1204		#       egdpool_path = "/var/run/egd-pool";
1205
1249	–
1250	–	/*
1251	–	* compression_level: level of compression for compressed links between
1252	–	* servers.
1253	–	*
1254	–	* values are between: 1 (least compression, fastest)
1255	–	*                and: 9 (most compression, slowest).
1256	–	*/
1257	–	#       compression_level = 6;
1258	–
1206		/*
1207		* throttle_time: the minimum amount of time between connections from
1208		* the same ip.  exempt {} blocks are excluded from this throttling.
#	Line 1332 | Line 1279 | modules {
1279		log {
1280		/* Do you want to enable logging to ircd.log? */
1281		use_logging = yes;
1335	–	timestamp = yes;
1282
1283		file {
1284		type = oper;
1285		name = "/home/ircd/var/log/oper.log";
1286	<	size = 50 megabytes;
1286	>	size = unlimited;
1287		};
1288
1289		file {

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)