| 1 |
|
/* doc/example.efnet.conf - ircd-hybrid-7 EFnet Example configuration file |
| 2 |
< |
* Copyright (C) 2000-2006 Hybrid Development Team |
| 2 |
> |
* Copyright (C) 2000-2011 Hybrid Development Team |
| 3 |
|
* |
| 4 |
|
* Written by ejb, wcampbel, db, leeh and others |
| 5 |
|
* Other example configurations can be found in the source dir under |
| 43 |
|
*/ |
| 44 |
|
|
| 45 |
|
/* |
| 46 |
< |
* serverinfo {}: contains information about the server. (OLD M:) |
| 46 |
> |
* serverinfo {}: contains information about the server |
| 47 |
|
*/ |
| 48 |
|
serverinfo { |
| 49 |
|
/* |
| 50 |
< |
* name: the name of our server. This cannot be changed at runtime. |
| 50 |
> |
* name: the name of this server. This cannot be changed at runtime. |
| 51 |
|
*/ |
| 52 |
|
name = "efnet.irc"; |
| 53 |
|
|
| 80 |
|
|
| 81 |
|
/* |
| 82 |
|
* vhost: the IP to bind to when we connect outward to ipv4 servers. |
| 83 |
< |
* This should be an ipv4 IP only, or "* for INADDR_ANY. |
| 83 |
> |
* This should be an ipv4 IP only, or "*" for INADDR_ANY. |
| 84 |
|
*/ |
| 85 |
|
#vhost = "192.169.0.1"; |
| 86 |
|
|
| 87 |
|
/* |
| 88 |
|
* vhost6: the IP to bind to when we connect outward to ipv6 servers. |
| 89 |
< |
* This should be an ipv6 IP only, or "* for INADDR_ANY. |
| 89 |
> |
* This should be an ipv6 IP only, or "*" for INADDR_ANY. |
| 90 |
|
*/ |
| 91 |
|
#vhost6 = "3ffe:80e8:546::2"; |
| 92 |
|
|
| 94 |
|
max_clients = 512; |
| 95 |
|
|
| 96 |
|
/* |
| 97 |
< |
* rsa key: the path to the file containing our rsa key for cryptlink. |
| 97 |
> |
* rsa_private_key_file: the path to the file containing our |
| 98 |
> |
* rsa key for cryptlink. |
| 99 |
|
* |
| 100 |
|
* Example command to store a 2048 bit RSA keypair in |
| 101 |
|
* rsa.key, and the public key in rsa.pub: |
| 102 |
|
* |
| 103 |
< |
* openssl genrsa -out rsa.key 2048 |
| 103 |
> |
* openssl genrsa -out rsa.key 2048 |
| 104 |
|
* openssl rsa -in rsa.key -pubout -out rsa.pub |
| 105 |
|
* chown <ircd-user>.<ircd.group> rsa.key rsa.pub |
| 106 |
|
* chmod 0600 rsa.key |
| 107 |
|
* chmod 0644 rsa.pub |
| 108 |
|
*/ |
| 109 |
|
#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key"; |
| 110 |
+ |
|
| 111 |
+ |
/* |
| 112 |
+ |
* ssl_certificate_file: the path to the file containing our |
| 113 |
+ |
* ssl certificate for encrypted client connection. |
| 114 |
+ |
* |
| 115 |
+ |
* This assumes your private RSA key is stored in rsa.key. You |
| 116 |
+ |
* MUST have an RSA key in order to generate the certificate |
| 117 |
+ |
* |
| 118 |
+ |
* openssl req -new -days 365 -x509 -key rsa.key -out cert.pem |
| 119 |
+ |
* |
| 120 |
+ |
* See http://www.openssl.org/docs/HOWTO/certificates.txt |
| 121 |
+ |
* |
| 122 |
+ |
* Please use the following values when generating the cert |
| 123 |
+ |
* |
| 124 |
+ |
* Organization Name: Network Name |
| 125 |
+ |
* Organization Unit Name: changme.someirc.net |
| 126 |
+ |
* Common Name: irc.someirc.net |
| 127 |
+ |
* E-mail: you@domain.com |
| 128 |
+ |
*/ |
| 129 |
+ |
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 130 |
+ |
|
| 131 |
+ |
/* |
| 132 |
+ |
* ssl_server_protocol: |
| 133 |
+ |
* SSL/TLS protocols we provide for incoming secure connections. |
| 134 |
+ |
* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1. |
| 135 |
+ |
* SSLv2 is not suppported. This cannot be changed at runtime. |
| 136 |
+ |
*/ |
| 137 |
+ |
#ssl_server_protocol = sslv3, tlsv1; |
| 138 |
|
}; |
| 139 |
|
|
| 140 |
|
/* |
| 141 |
< |
* admin {}: contains admin information about the server. (OLD A:) |
| 141 |
> |
* admin {}: contains admin information about the server |
| 142 |
|
*/ |
| 143 |
|
admin { |
| 144 |
|
name = "EFnet Admin"; |
| 147 |
|
}; |
| 148 |
|
|
| 149 |
|
/* |
| 150 |
< |
* log {}: contains information about logfiles. |
| 122 |
< |
*/ |
| 123 |
< |
log { |
| 124 |
< |
/* Do you want to enable logging to ircd.log? */ |
| 125 |
< |
use_logging = yes; |
| 126 |
< |
|
| 127 |
< |
/* |
| 128 |
< |
* logfiles: the logfiles to use for user connects, /oper uses, |
| 129 |
< |
* and failed /oper. These files must exist for logging to be used. |
| 130 |
< |
*/ |
| 131 |
< |
fname_userlog = "logs/userlog"; |
| 132 |
< |
fname_operlog = "logs/operlog"; |
| 133 |
< |
fname_killlog = "logs/kill"; |
| 134 |
< |
fname_klinelog = "logs/kline"; |
| 135 |
< |
fname_glinelog = "logs/gline"; |
| 136 |
< |
|
| 137 |
< |
/* |
| 138 |
< |
* log_level: the amount of detail to log in ircd.log. The |
| 139 |
< |
* higher, the more information is logged. May be changed |
| 140 |
< |
* once the server is running via /quote SET LOG. Either: |
| 141 |
< |
* L_CRIT, L_ERROR, L_WARN, L_NOTICE, L_TRACE, L_INFO or L_DEBUG |
| 142 |
< |
*/ |
| 143 |
< |
log_level = L_INFO; |
| 144 |
< |
}; |
| 145 |
< |
|
| 146 |
< |
/* |
| 147 |
< |
* class {}: contains information about classes for users (OLD Y:) |
| 150 |
> |
* class {}: contains information about classes for users |
| 151 |
|
*/ |
| 152 |
|
class { |
| 153 |
|
/* name: the name of the class. classes are text now */ |
| 248 |
|
}; |
| 249 |
|
|
| 250 |
|
/* |
| 251 |
< |
* listen {}: contains information about the ports ircd listens on (OLD P:) |
| 251 |
> |
* listen {}: contains information about the ports ircd listens on |
| 252 |
|
*/ |
| 253 |
|
listen { |
| 254 |
|
/* |
| 262 |
|
port = 6665 .. 6669; |
| 263 |
|
|
| 264 |
|
/* |
| 265 |
< |
* Listen on 192.168.0.1/7023 and hidden from STATS P |
| 265 |
> |
* Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P |
| 266 |
|
* unless you are an administrator. |
| 267 |
|
* |
| 268 |
|
* NOTE: The "flags" directive has to come before "port". Always! |
| 271 |
|
* |
| 272 |
|
* ssl - Port is for SSL client connections only |
| 273 |
|
* server - Only server connections are permitted |
| 274 |
< |
* hidden - Port is hidden from /stats P |
| 274 |
> |
* hidden - Port is hidden from /stats P, unless you're an admin |
| 275 |
|
*/ |
| 276 |
< |
flags = hidden; |
| 276 |
> |
flags = hidden, ssl; |
| 277 |
|
host = "192.168.0.1"; |
| 278 |
< |
port = 7023; |
| 278 |
> |
port = 6697; |
| 279 |
|
|
| 280 |
|
/* |
| 281 |
|
* host: set a specific IP/host the ports after the line will listen |
| 289 |
|
}; |
| 290 |
|
|
| 291 |
|
/* |
| 292 |
< |
* auth {}: allow users to connect to the ircd (OLD I:) |
| 292 |
> |
* auth {}: allow users to connect to the ircd |
| 293 |
|
*/ |
| 294 |
|
auth { |
| 295 |
|
/* |
| 318 |
|
class = "opers"; |
| 319 |
|
|
| 320 |
|
/* |
| 321 |
< |
* need_password: don't allow users who haven't supplied the correct |
| 322 |
< |
* password to connect using another auth{} block |
| 323 |
< |
* ('&' prefix on /stats I if disabled) |
| 324 |
< |
* need_ident: require the user to have identd to connect ('+' prefix on /stats I) |
| 325 |
< |
* spoof_notice: enable spoofing notification to admins |
| 326 |
< |
* exceed_limit: allow a user to exceed class limits ('>' prefix on /stats I) |
| 327 |
< |
* kline_exempt: exempt this user from k/glines ('^' prefix on /stats I) |
| 328 |
< |
* gline_exempt: exempt this user from glines ('_' prefix on /stats I) |
| 329 |
< |
* resv_exempt: exempt this user from resvs ('$' prefix on /stats I) |
| 330 |
< |
* no_tilde: remove ~ from a user with no ident ('-' prefix on /stats I) |
| 331 |
< |
* can_flood: allow this user to exceed flood limits ('|' prefix on /stats I) |
| 329 |
< |
* can_idle: exempt this user from idle restrictions ('<' prefix on /stats I) |
| 321 |
> |
* need_password - don't allow users who haven't supplied the correct |
| 322 |
> |
* password to connect using another auth{} block |
| 323 |
> |
* ('&' prefix on /stats I if disabled) |
| 324 |
> |
* need_ident - require the user to have identd to connect ('+' prefix on /stats I) |
| 325 |
> |
* spoof_notice - enable spoofing notification to admins |
| 326 |
> |
* exceed_limit - allow a user to exceed class limits ('>' prefix on /stats I) |
| 327 |
> |
* kline_exempt - exempt this user from k/glines ('^' prefix on /stats I) |
| 328 |
> |
* gline_exempt - exempt this user from glines ('_' prefix on /stats I) |
| 329 |
> |
* resv_exempt - exempt this user from resvs ('$' prefix on /stats I) |
| 330 |
> |
* no_tilde - remove ~ from a user with no ident ('-' prefix on /stats I) |
| 331 |
> |
* can_flood - allow this user to exceed flood limits ('|' prefix on /stats I) |
| 332 |
|
*/ |
| 333 |
|
flags = need_password, spoof_notice, exceed_limit, kline_exempt, |
| 334 |
< |
gline_exempt, resv_exempt, no_tilde, can_flood, can_idle; |
| 334 |
> |
gline_exempt, resv_exempt, no_tilde, can_flood; |
| 335 |
|
}; |
| 336 |
|
|
| 337 |
|
auth { |
| 356 |
|
}; |
| 357 |
|
|
| 358 |
|
/* |
| 359 |
< |
* operator {}: defines ircd operators. (OLD O:) |
| 359 |
> |
* operator {}: defines ircd operators |
| 360 |
|
* |
| 361 |
|
* ircd-hybrid no longer supports local operators, privileges are |
| 362 |
|
* controlled via flags. |
| 375 |
|
|
| 376 |
|
/* |
| 377 |
|
* password: the password required to oper. By default this will |
| 378 |
< |
* need to be encrypted using 'mkpasswd'. MD5 is supported. |
| 378 |
> |
* need to be encrypted by using the provided mkpasswd tool. |
| 379 |
> |
* Several password hash algorithms are available depending |
| 380 |
> |
* on your system's crypt() implementation. For example, a modern |
| 381 |
> |
* glibc already has support for SHA-256/512, and MD5 encryption |
| 382 |
> |
* algorithms. |
| 383 |
|
*/ |
| 384 |
< |
password = "etcnjl8juSU1E"; |
| 384 |
> |
password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4"; |
| 385 |
|
|
| 386 |
|
/* |
| 387 |
|
* encrypted: controls whether the oper password above has been |
| 388 |
< |
* encrypted. (OLD CRYPT_OPER_PASSWORD now optional per operator) |
| 388 |
> |
* encrypted. |
| 389 |
|
*/ |
| 390 |
|
encrypted = yes; |
| 391 |
|
|
| 429 |
|
|
| 430 |
|
/* |
| 431 |
|
* privileges: controls the activities and commands an oper is |
| 432 |
< |
* allowed to do on the server. All options default to no. |
| 432 |
> |
* allowed to do on the server. All options default to no. |
| 433 |
|
* Available options: |
| 434 |
|
* |
| 435 |
< |
* global_kill: allows remote users to be /KILL'd (OLD 'O' flag) |
| 436 |
< |
* remote: allows remote SQUIT and CONNECT (OLD 'R' flag) |
| 437 |
< |
* remoteban: allows remote KLINE/UNKLINE |
| 438 |
< |
* kline: allows KILL, KLINE and DLINE (OLD 'K' flag) |
| 439 |
< |
* unkline: allows UNKLINE and UNDLINE (OLD 'U' flag) |
| 440 |
< |
* gline: allows GLINE (OLD 'G' flag) |
| 441 |
< |
* xline: allows XLINE (OLD 'X' flag) |
| 442 |
< |
* operwall: allows OPERWALL |
| 443 |
< |
* nick_changes: allows oper to see nickchanges (OLD 'N' flag) |
| 444 |
< |
* via usermode +n |
| 445 |
< |
* rehash: allows oper to REHASH config (OLD 'H' flag) |
| 446 |
< |
* die: allows DIE and RESTART (OLD 'D' flag) |
| 447 |
< |
* admin: gives admin privileges. admins |
| 448 |
< |
* may (un)load modules and see the |
| 449 |
< |
* real IPs of servers. |
| 450 |
< |
* hidden_admin: same as 'admin', but noone can recognize you as |
| 451 |
< |
* being an admin |
| 452 |
< |
* hidden_oper: not shown in /stats p (except for other operators) |
| 453 |
< |
*/ |
| 448 |
< |
/* You can either use |
| 449 |
< |
* die = yes; |
| 450 |
< |
* rehash = yes; |
| 451 |
< |
* |
| 452 |
< |
* or in a flags statement i.e. |
| 453 |
< |
* flags = die, rehash; |
| 454 |
< |
* |
| 455 |
< |
* You can also negate a flag with ~ i.e. |
| 456 |
< |
* flags = ~remote; |
| 457 |
< |
* |
| 435 |
> |
* module - allows MODLIST, MODRESTART, MODLOAD, MODUNLOAD |
| 436 |
> |
* global_kill - allows remote users to be /KILL'd |
| 437 |
> |
* remote - allows remote SQUIT and CONNECT |
| 438 |
> |
* remoteban - allows remote KLINE/UNKLINE |
| 439 |
> |
* kline - allows KILL, KLINE and DLINE |
| 440 |
> |
* unkline - allows UNKLINE and UNDLINE |
| 441 |
> |
* gline - allows GLINE |
| 442 |
> |
* xline - allows XLINE |
| 443 |
> |
* globops - allows GLOBOPS |
| 444 |
> |
* operwall - allows OPERWALL |
| 445 |
> |
* nick_changes - allows oper to see nickchanges via usermode +n |
| 446 |
> |
* rehash - allows oper to REHASH config |
| 447 |
> |
* die - allows DIE |
| 448 |
> |
* restart - allows RESTART |
| 449 |
> |
* admin - gives admin privileges. admins for example, |
| 450 |
> |
* may see the real IP addresses of servers. |
| 451 |
> |
* hidden_admin - same as 'admin', but noone can recognize you as |
| 452 |
> |
* being an admin |
| 453 |
> |
* hidden_oper - not shown in /stats p (except for other operators) |
| 454 |
|
*/ |
| 455 |
< |
flags = global_kill, remote, kline, unkline, xline, |
| 456 |
< |
die, rehash, nick_changes, admin, operwall; |
| 455 |
> |
flags = global_kill, remote, kline, unkline, xline, globops, restart, |
| 456 |
> |
die, rehash, nick_changes, admin, operwall, module; |
| 457 |
|
}; |
| 458 |
|
|
| 459 |
|
/* |
| 460 |
< |
* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) |
| 460 |
> |
* connect {}: controls servers we connect to |
| 461 |
|
*/ |
| 462 |
|
connect { |
| 463 |
|
/* name: the name of the server */ |
| 485 |
|
|
| 486 |
|
/* |
| 487 |
|
* encrypted: controls whether the accept_password above has been |
| 488 |
< |
* encrypted. (OLD CRYPT_LINK_PASSWORD now optional per connect) |
| 488 |
> |
* encrypted. |
| 489 |
|
*/ |
| 490 |
|
encrypted = no; |
| 491 |
|
|
| 504 |
|
*/ |
| 505 |
|
# leaf_mask = "*.uk"; |
| 506 |
|
|
| 511 |
– |
/* fakename: the servername we pretend to be when we connect */ |
| 512 |
– |
# fakename = "*.arpa"; |
| 513 |
– |
|
| 507 |
|
/* class: the class this server is in */ |
| 508 |
|
class = "server"; |
| 509 |
|
|
| 510 |
|
/* |
| 511 |
< |
* autoconn: controls whether we autoconnect to this server or not, |
| 511 |
> |
* autoconn - controls whether we autoconnect to this server or not, |
| 512 |
|
* dependent on class limits. By default, this is disabled. |
| 513 |
< |
* compressed: controls whether traffic is compressed via ziplinks. |
| 513 |
> |
* compressed - controls whether traffic is compressed via ziplinks. |
| 514 |
|
* By default, this is disabled |
| 515 |
< |
* cryptlink: enable full encryption for all data passing between our |
| 515 |
> |
* cryptlink - enable full encryption for all data passing between our |
| 516 |
|
* server and this link and rsa authentication. |
| 517 |
< |
* burst_away: This will send the /away string that users have set |
| 517 |
> |
* burst_away - This will send the /away string that users have set |
| 518 |
|
* on the server burst. Note this can be a lot of data |
| 519 |
|
* and slow down your server burst. |
| 520 |
< |
* topicburst: Send topics to this server during channel burst. Works |
| 520 |
> |
* topicburst - Send topics to this server during channel burst. Works |
| 521 |
|
* only if the server we are connecting to is capable |
| 522 |
|
* of TBURST/TB. |
| 523 |
|
*/ |
| 581 |
|
|
| 582 |
|
/* |
| 583 |
|
* cluster {}: servers that share klines/unkline/xline/unxline/resv/unresv/locops |
| 584 |
< |
* automatically (OLD hyb6 SLAVE_SERVERS) |
| 584 |
> |
* automatically |
| 585 |
|
*/ |
| 586 |
|
cluster { |
| 587 |
|
/* |
| 615 |
|
}; |
| 616 |
|
|
| 617 |
|
/* |
| 618 |
< |
* shared {}: users that are allowed to remote kline (OLD U:) |
| 618 |
> |
* shared {}: users that are allowed to remote kline |
| 619 |
|
* |
| 620 |
|
* NOTE: This can be effectively used for remote klines. |
| 621 |
|
* Please note that there is no password authentication |
| 642 |
|
* tkline - allow temporary klines |
| 643 |
|
* unkline - allow oper/server to unkline |
| 644 |
|
* xline - allow oper/server to xline |
| 645 |
< |
* txline - allow temporary xlines |
| 645 |
> |
* txline - allow temporary xlines |
| 646 |
|
* unxline - allow oper/server to unxline |
| 647 |
|
* resv - allow oper/server to resv |
| 648 |
< |
* tresv - allow temporary resvs |
| 648 |
> |
* tresv - allow temporary resvs |
| 649 |
|
* unresv - allow oper/server to unresv |
| 650 |
< |
* locops - allow oper/server to locops - only used for servers that cluster |
| 650 |
> |
* locops - allow oper/server to locops - only used for servers that cluster |
| 651 |
|
* all - allow oper/server to do all of the above (default) |
| 652 |
|
*/ |
| 653 |
|
type = kline, unkline, resv; |
| 654 |
|
}; |
| 655 |
|
|
| 656 |
|
/* |
| 657 |
< |
* kill {}: users that are not allowed to connect (OLD K:) |
| 657 |
> |
* kill {}: users that are not allowed to connect |
| 658 |
|
* Oper issued klines will be added to the specified kline config |
| 659 |
|
*/ |
| 660 |
|
kill { |
| 663 |
|
}; |
| 664 |
|
|
| 665 |
|
kill { |
| 666 |
< |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$"; |
| 666 |
> |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$"; |
| 667 |
> |
|
| 668 |
> |
/* |
| 669 |
> |
* NOTE: You have to set type=regex; when using a regular expression |
| 670 |
> |
* based user entry |
| 671 |
> |
*/ |
| 672 |
|
type = regex; |
| 673 |
|
}; |
| 674 |
|
|
| 682 |
|
}; |
| 683 |
|
|
| 684 |
|
/* |
| 685 |
< |
* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) |
| 685 |
> |
* exempt {}: IPs that are exempt from deny {} and Dlines. |
| 686 |
|
* |
| 687 |
|
* EFnet Note: We really suggest to enable general::stats_e_disabled |
| 688 |
|
* if you plan to exempt EFnet server IPs you don't want to show to |
| 693 |
|
}; |
| 694 |
|
|
| 695 |
|
/* |
| 696 |
< |
* resv {}: nicks and channels users may not use/join (OLD Q:) |
| 696 |
> |
* resv {}: nicks and channels users may not use/join |
| 697 |
|
*/ |
| 698 |
|
resv { |
| 699 |
|
/* reason: the reason for the proceeding resv's */ |
| 741 |
|
|
| 742 |
|
gecos { |
| 743 |
|
name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$"; |
| 744 |
+ |
|
| 745 |
+ |
/* |
| 746 |
+ |
* NOTE: You have to set type=regex; when using a regular expression |
| 747 |
+ |
* based name entry |
| 748 |
+ |
*/ |
| 749 |
|
type = regex; |
| 750 |
|
}; |
| 751 |
|
|
| 812 |
|
* knock_delay: The amount of time a user must wait between issuing |
| 813 |
|
* the knock command. |
| 814 |
|
*/ |
| 815 |
< |
knock_delay = 1 minutes; |
| 815 |
> |
knock_delay = 5 minutes; |
| 816 |
|
|
| 817 |
|
/* |
| 818 |
|
* knock_delay_channel: How often a knock to any specific channel |
| 858 |
|
* default_split_user_count: when the usercount is lower than this level, |
| 859 |
|
* consider ourselves split. This must be set for automatic splitmode. |
| 860 |
|
*/ |
| 861 |
< |
default_split_user_count = 40000; |
| 861 |
> |
default_split_user_count = 20000; |
| 862 |
|
|
| 863 |
|
/* |
| 864 |
|
* default_split_server_count: when the servercount is lower than this, |
| 866 |
|
*/ |
| 867 |
|
default_split_server_count = 10; |
| 868 |
|
|
| 869 |
< |
/* split no create: disallow users creating channels on split. */ |
| 869 |
> |
/* no_create_on_split: disallow users creating channels on split. */ |
| 870 |
|
no_create_on_split = yes; |
| 871 |
|
|
| 872 |
< |
/* split: no join: disallow users joining channels at all on a split */ |
| 872 |
> |
/* no_join_on_split: disallow users joining channels at all on a split. */ |
| 873 |
|
no_join_on_split = no; |
| 874 |
|
}; |
| 875 |
|
|
| 886 |
|
* may be a good idea. Except, it's useless |
| 887 |
|
* unless the entire net runs it. |
| 888 |
|
*/ |
| 889 |
< |
flatten_links = yes; |
| 889 |
> |
flatten_links = no; |
| 890 |
|
|
| 891 |
|
/* |
| 892 |
|
* links_delay: how often to update the links file when it is |
| 918 |
|
hidden_name = "*.hidden.com"; |
| 919 |
|
|
| 920 |
|
/* |
| 921 |
< |
* hide_server_ips: If this is disabled, opers will be unable to see servers |
| 922 |
< |
* ips and will be shown a masked ip, admins will be shown the real ip. |
| 923 |
< |
* |
| 924 |
< |
* If this is enabled, nobody can see a servers ip. *This is a kludge*, it |
| 925 |
< |
* has the side effect of hiding the ips everywhere, including logfiles. |
| 921 |
> |
* hide_server_ips: If this is disabled, opers will be unable to see |
| 922 |
> |
* servers ips and will be shown a masked ip, admins will be shown the |
| 923 |
> |
* real ip. |
| 924 |
> |
* |
| 925 |
> |
* If this is enabled, nobody can see a servers ip. *This is a kludge*, |
| 926 |
> |
* it has the side effect of hiding the ips everywhere, including |
| 927 |
> |
* logfiles. |
| 928 |
|
* |
| 929 |
|
* We recommend you leave this disabled, and just take care with who you |
| 930 |
|
* give admin=yes; to. |
| 937 |
|
* compiled in options in config.h. The general block is read at start time. |
| 938 |
|
*/ |
| 939 |
|
general { |
| 940 |
< |
/* max_watch: maximum WATCH entries */ |
| 941 |
< |
max_watch = 64; |
| 940 |
> |
/* max_watch: maximum WATCH entries a client can have. */ |
| 941 |
> |
max_watch = 60; |
| 942 |
|
|
| 943 |
|
/* |
| 944 |
|
* gline_min_cidr: the minimum required length of a CIDR bitmask |
| 970 |
|
|
| 971 |
|
/* |
| 972 |
|
* Max time from the nickname change that still causes KILL |
| 973 |
< |
* automatically to switch for the current nick of that user. (seconds) |
| 973 |
> |
* automatically to switch for the current nick of that user. |
| 974 |
|
*/ |
| 975 |
< |
kill_chase_time_limit = 90; |
| 976 |
< |
|
| 975 |
> |
kill_chase_time_limit = 90 seconds; |
| 976 |
> |
|
| 977 |
|
/* |
| 978 |
< |
* If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed |
| 979 |
< |
* users in /trace etc. If this is defined they will be shown a masked IP. |
| 978 |
> |
* If hide_spoof_ips is disabled, opers will be allowed to see the real |
| 979 |
> |
* IP of spoofed users in /trace etc. If this is defined they will be |
| 980 |
> |
* shown a masked IP. |
| 981 |
|
*/ |
| 982 |
|
hide_spoof_ips = yes; |
| 983 |
|
|
| 1021 |
|
* dots_in_ident: the amount of '.' characters permitted in an ident |
| 1022 |
|
* reply before the user is rejected. |
| 1023 |
|
*/ |
| 1024 |
< |
dots_in_ident = 0; |
| 1019 |
< |
|
| 1020 |
< |
/* |
| 1021 |
< |
* dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts |
| 1022 |
< |
* without a '.' in them. This will add one to the end. Only needed |
| 1023 |
< |
* for older servers. |
| 1024 |
< |
*/ |
| 1025 |
< |
dot_in_ip6_addr = no; |
| 1024 |
> |
dots_in_ident = 2; |
| 1025 |
|
|
| 1026 |
|
/* |
| 1027 |
|
* min_nonwildcard: the minimum non wildcard characters in k/d/g lines |
| 1163 |
|
/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels */ |
| 1164 |
|
oper_pass_resv = yes; |
| 1165 |
|
|
| 1167 |
– |
/* |
| 1168 |
– |
* idletime: the maximum amount of time a user may idle before |
| 1169 |
– |
* they are disconnected |
| 1170 |
– |
*/ |
| 1171 |
– |
idletime = 0; |
| 1172 |
– |
|
| 1166 |
|
/* REMOVE ME. The following line checks you've been reading. */ |
| 1167 |
|
havent_read_conf = 1; |
| 1168 |
|
|
| 1191 |
|
* |
| 1192 |
|
* +b - bots - See bot and drone flooding notices |
| 1193 |
|
* +c - cconn - Client connection/quit notices |
| 1194 |
< |
* +C - cconn - Client connection/quit notices full |
| 1194 |
> |
* +C - cconn_full - Client connection/quit notices full |
| 1195 |
|
* +D - deaf - Don't receive channel messages |
| 1196 |
|
* +d - debug - See debugging notices |
| 1197 |
|
* +f - full - See I: line full notices |
| 1284 |
|
duration = 1 day; |
| 1285 |
|
|
| 1286 |
|
/* |
| 1287 |
< |
* logging: which types of rules you want to log when triggered |
| 1287 |
> |
* log: which types of rules you want to log when triggered |
| 1288 |
|
* (choose reject or block) |
| 1289 |
|
*/ |
| 1290 |
< |
logging = reject, block; |
| 1290 |
> |
log = reject, block; |
| 1291 |
|
|
| 1292 |
|
/* |
| 1293 |
|
* NOTE: gline ACLs can cause a desync of glines throughout the |
| 1316 |
|
|
| 1317 |
|
modules { |
| 1318 |
|
/* |
| 1319 |
< |
* module path: other paths to search for modules specified below |
| 1319 |
> |
* path: other paths to search for modules specified below |
| 1320 |
|
* and in /modload. |
| 1321 |
|
*/ |
| 1322 |
< |
path = "@datadir@/modules"; |
| 1323 |
< |
path = "@datadir@/autoload"; |
| 1322 |
> |
path = "/usr/local/ircd/lib/ircd-hybrid/modules"; |
| 1323 |
> |
path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload"; |
| 1324 |
|
|
| 1325 |
|
/* module: the name of a module to load on startup/rehash */ |
| 1326 |
< |
#module = "some_module.so"; |
| 1326 |
> |
#module = "some_module.la"; |
| 1327 |
> |
}; |
| 1328 |
> |
|
| 1329 |
> |
/* |
| 1330 |
> |
* log {}: contains information about logfiles. |
| 1331 |
> |
*/ |
| 1332 |
> |
log { |
| 1333 |
> |
/* Do you want to enable logging to ircd.log? */ |
| 1334 |
> |
use_logging = yes; |
| 1335 |
> |
timestamp = yes; |
| 1336 |
> |
|
| 1337 |
> |
file { |
| 1338 |
> |
type = oper; |
| 1339 |
> |
name = "/home/ircd/var/log/oper.log"; |
| 1340 |
> |
size = 50 megabytes; |
| 1341 |
> |
}; |
| 1342 |
> |
|
| 1343 |
> |
file { |
| 1344 |
> |
type = user; |
| 1345 |
> |
name = "/home/ircd/var/log/user.log"; |
| 1346 |
> |
size = 50 megabytes; |
| 1347 |
> |
}; |
| 1348 |
> |
|
| 1349 |
> |
file { |
| 1350 |
> |
type = kill; |
| 1351 |
> |
name = "/home/ircd/var/log/kill.log"; |
| 1352 |
> |
size = 50 megabytes; |
| 1353 |
> |
}; |
| 1354 |
> |
|
| 1355 |
> |
file { |
| 1356 |
> |
type = kline; |
| 1357 |
> |
name = "/home/ircd/var/log/kline.log"; |
| 1358 |
> |
size = 50 megabytes; |
| 1359 |
> |
}; |
| 1360 |
> |
|
| 1361 |
> |
file { |
| 1362 |
> |
type = dline; |
| 1363 |
> |
name = "/home/ircd/var/log/dline.log"; |
| 1364 |
> |
size = 50 megabytes; |
| 1365 |
> |
}; |
| 1366 |
> |
|
| 1367 |
> |
file { |
| 1368 |
> |
type = gline; |
| 1369 |
> |
name = "/home/ircd/var/log/gline.log"; |
| 1370 |
> |
size = 50 megabytes; |
| 1371 |
> |
}; |
| 1372 |
> |
|
| 1373 |
> |
file { |
| 1374 |
> |
type = debug; |
| 1375 |
> |
name = "/home/ircd/var/log/debug.log"; |
| 1376 |
> |
size = 50 megabytes; |
| 1377 |
> |
}; |
| 1378 |
|
}; |