trunk/doc/example.quick.conf

/* doc/example.conf.quick - ircd-hybrid-7 Example configuration file
 * Copyright (C) 2000-2011 Hybrid Development Team
 *
 * Written by ejb, wcampbel, db, leeh and others
 *
 * $Id$
 */

/* IMPORTANT NOTES:
 *
 * auth {} blocks MUST be specified in order of precedence.  The first one
 * that matches a user will be used.  So place spoofs first, then specials,
 * then general access, then restricted.
 *
 * Both shell style (#) and C style comments are supported.
 *
 * Files may be included by either:
 *        .include "filename"
 *        .include <filename>
 *
 * Times/durations are written as:
 *        12 hours 30 minutes 1 second
 *        
 * Valid units of time:
 *        month, week, day, hour, minute, second
 *
 * Valid units of size:
 *        megabyte/mbyte/mb, kilobyte/kbyte/kb, byte
 *
 * Sizes and times may be singular or plural.  
 */ 

/* EFNET NOTE:
 * 
 * This config file is NOT suitable for EFNet.  EFNet admins should use
 * example.efnet.conf
 */
 
serverinfo {
        name = "hades.arpa";
        sid = "_CHANGE_ME_";
        description = "hybrid-7 test server";
        network_name = "MyNet";
        network_desc = "This is My Network";
        hub = no;
        #vhost = "192.169.0.1";
        #vhost6 = "3ffe:80e8:546::2";
        max_clients = 512;
        #rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
        #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
};

/* admin {}: contains admin information about the server. (OLD A:) */
admin {
        name = "Smurf target";
        description = "Main Server Administrator";
        email = "<syn@packets.r.us>";
};

/* class {}: contain information about classes for users (OLD Y:) */
class {
        name = "users";
        ping_time = 2 minutes;
        number_per_ip = 2;
        max_number = 100;
        sendq = 100 kbytes;
};

class {
        name = "restricted";
        ping_time = 1 minute 30 seconds;
        number_per_ip = 1;
        max_number = 100;
        sendq = 60kb;
};

class {
        name = "opers";
        ping_time = 5 minutes;
        number_per_ip = 10;
        max_number = 100;
        sendq = 100kbytes;
};

class {
        name = "server";
        ping_time = 5 minutes;
        ping_warning = 15 seconds;
        connectfreq = 5 minutes;
        max_number = 1;
        sendq=2 megabytes;
};

/* listen {}: contain information about the ports ircd listens on (OLD P:) */
listen {
        port = 6665 .. 6669;

        flags = ssl;
        port = 6697;

        host = "1.2.3.4";
        port = 7000, 7001;

        host = "3ffe:1234:a:b:c::d";
        port = 7002;
};

/* auth {}: allow users to connect to the ircd (OLD I:) */
auth {
        user = "*@172.16.0.0/12";
        user = "*test@123D:B567:*";
        password = "letmein";
        flags = need_password, spoof_notice, exceed_limit, kline_exempt,
                gline_exempt, no_tilde;
        spoof = "I.still.hate.packets";
        class = "opers";
};

auth {
        redirserv = "irc.fi";
        redirport = 6667;
        user = "*.fi";
        class = "users";
};

auth {
        user = "*@*";
        class = "users";
        flags = need_ident;
};

/* operator {}: defines ircd operators. (OLD O:)
 * ircd-hybrid no longer supports local operators, privileges are
 * controlled via flags.
 */
operator {
        name = "god";
        user = "*god@*";
        user = "*@127.0.0.1";
        password = "etcnjl8juSU1E";
        encrypted = yes;
        #rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
        class = "opers";
        flags = global_kill, remote, kline, unkline, gline, module,
                xline, die, rehash, nick_changes, admin;
};

/* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
connect {
        name = "irc.uplink.com";
        host = "192.168.0.1";
        send_password = "password";
        accept_password = "anotherpassword";
        encrypted = no;
        port = 6666;
        hub_mask = "*";
        #leaf_mask = "*.uk";
        class = "server";
        flags = autoconn;
};

connect {
        name = "encrypted.auth.example";
        host = "some.host.somewhere";
        port = 6667;

        flags = cryptlink;
        rsa_public_key_file = "etc/remote.server.keyfile";
        #cipher_preference = "BF/168";
};

connect {
        name = "ipv6.some.server";
        host = "3ffd:dead:beef::1";
        send_password = "password";
        accept_password = "password";
        port = 6666;

        aftype = ipv6;
        class = "server";
};

/* cluster{}: servers that share klines/unkline/xline/unxline/resv/unresv/locops
 * automatically (OLD hyb6 SLAVE_SERVERS)
 */
cluster {
        /* name: the server to share with, this can take wildcards */
        /* NOTE: only local actions will be clustered, meaning if
         *       the server receives a shared kline/unkline/etc, it
         *       will not be propagated to clustered servers.
         */
        name = "*.arpa";
        
        /* type: list of what to share, options are as follows:
         *      kline   - share klines
         *      unkline - share unklines
         *      xline   - share xlines
         *      unxline - share unxlines
         *      resv    - share resvs
         *      unresv  - share unresvs
         *      locops  - share locops
         *      all     - share all of the above
         */
        type = kline, unkline, locops, xline, resv;
};

/* shared {}: users that are allowed to remote kline (OLD U:) */
shared {
        name = "irc2.some.server";
        user = "oper@my.host.is.spoofed";
        type = all;
};

/* kill {}: users that are not allowed to connect (OLD K:)
 * Oper issued klines will be added to the specified kline config
 */
kill {
        user = "bad@*.hacked.edu";
        reason = "Obviously hacked account";
};

/* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
 * Oper issued dlines will be added to the specified dline config
 */
deny {
        ip = "10.0.1.0/24";
        reason = "Reconnecting vhosted bots";
};

/* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) */
exempt {
        ip = "192.168.0.0/16";
};

/* resv {}: nicks and channels users may not use/join (OLD Q:) */
resv {
        nick = "nickserv";
        nick = "chanserv";
        channel = "#services";
        reason = "Clone bots";
        nick = "clone*";
};

gecos {
        name = "*sex*";
        reason = "Possible spambot";
};

gecos {
        name = "sub7server";
        reason = "Trojan drone";
};

gecos {
        name = "*http*";
        reason = "Spambot";
};

channel {
        restrict_channels = no;
        disable_local_channels = no;
        use_invex = yes;
        use_except = yes;
        use_knock = yes;
        knock_delay = 5 minutes;
        knock_delay_channel = 1 minute;
    burst_topicwho = yes;
        max_chans_per_user = 15;
        quiet_on_ban = yes;
        max_bans = 25;
        join_flood_count = 16;
        join_flood_time = 8 seconds;
        default_split_user_count = 0;
        default_split_server_count = 0;
        no_create_on_split = yes;
        no_join_on_split = no;
};

serverhide {
        flatten_links = no;
        links_delay = 5 minutes;
        hidden = no;
        disable_hidden = no;
        hide_servers = no;
        hidden_name = "*.hidden.com";
        hide_server_ips = no;
};

general {
        kill_chase_time_limit = 90 seconds;
        hide_spoof_ips = yes;
        ignore_bogus_ts = no;

        disable_auth = no;
        disable_remote_commands = no;
        default_floodcount = 10;
        failed_oper_notice = yes;
        dots_in_ident=2;
        min_nonwildcard = 4;
        min_nonwildcard_simple = 3;
        max_accept = 20;
        anti_nick_flood = yes;

        max_nick_time = 20 seconds;
        max_nick_changes = 5;

        anti_spam_exit_message_time = 5 minutes;
        ts_warn_delta = 30 seconds;
        ts_max_delta = 5 minutes;

        kline_with_reason = yes;
        kline_with_connection_closed = no;
        reject_hold_time = 0;

        invisible_on_connect = yes;
        warn_no_nline = yes;
        stats_o_oper_only=yes;
        stats_P_oper_only=no;
        stats_i_oper_only=masked;
        stats_k_oper_only=masked;
        caller_id_wait = 1 minute;
        pace_wait_simple = 1 second;
        pace_wait = 10 seconds;
        short_motd = no;
        ping_cookie = no;
        no_oper_flood = yes;
        true_no_oper_flood = yes;
        oper_pass_resv = yes;

        /* REMOVE ME.  The following line checks you've been reading. */
        havent_read_conf = 1;

        max_targets = 4;
        client_flood = 2560;
        message_locale = "standard";
        oper_only_umodes = bots, cconn, debug, full, skill, nchange, 
                     rej, spy, external, operwall, locops, unauth;

        oper_umodes = bots, locops, servnotice, operwall, wallop;


        #servlink_path = "/usr/local/ircd/bin/servlink";
        #default_cipher_preference = "BF/168";
        #use_egd = yes;
        #egdpool_path = "/var/run/egd-pool";
        #compression_level = 6;
        throttle_time = 10;
};

glines {
        enable = yes;
        duration = 1 day;
        log = reject;

        user = "god@I.still.hate.packets";
        name = "hades.arpa";      
        action = reject, block;

        user = "god@*"; 
        name = "*";
        action = block;
};

modules {
        path = "/usr/local/ircd/lib/ircd-hybrid/modules";
        path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
        #module = "some_module.so";
};

/*
 * log {}:  contains information about logfiles.
 */
log {
        /* Do you want to enable logging to ircd.log? */
        use_logging = yes;
        timestamp = yes;

        file {
                type = oper;
                name = "/home/ircd/var/log/oper.log";
                size = 50 megabytes;
        };

        file {
                type = user;
                name = "/home/ircd/var/log/oper.log";
                size = 50 megabytes;
        };

        file {
                type = kill;
                name = "/home/ircd/var/log/kill.log";
                size = 50 megabytes;
        };

        file {
                type = kline;
                name = "/home/ircd/var/log/kline.log";
                size = 50 megabytes;
        };

        file {
                type = dline;
                name = "/home/ircd/var/log/dline.log";
                size = 50 megabytes;
        };

        file {
                type = gline;
                name = "/home/ircd/var/log/gline.log";
                size = 50 megabytes;
        };

        file {
                type = debug;
                name = "/home/ircd/var/log/debug.log";
                size = 50 megabytes;
        };
};
Revision:	1247
Committed:	Sat Oct 1 07:54:24 2011 UTC (14 years, 9 months ago) by michael
Original Path:	*ircd-hybrid-8/etc/example.quick.conf*
File size:	9169 byte(s)
Log Message:	- Rewrite and cleanup half-broken logging subsystem. Logfile rotating is not working yet
#	User	Rev	Content
1	db	897	/* doc/example.conf.quick - ircd-hybrid-7 Example configuration file
2	michael	1134	* Copyright (C) 2000-2011 Hybrid Development Team
3	db	897	*
4			* Written by ejb, wcampbel, db, leeh and others
5			*
6			* $Id$
7			*/
8
9			/* IMPORTANT NOTES:
10			*
11			* auth {} blocks MUST be specified in order of precedence. The first one
12			* that matches a user will be used. So place spoofs first, then specials,
13			* then general access, then restricted.
14			*
15			* Both shell style (#) and C style comments are supported.
16			*
17			* Files may be included by either:
18			* .include "filename"
19			* .include <filename>
20			*
21			* Times/durations are written as:
22			* 12 hours 30 minutes 1 second
23			*
24			* Valid units of time:
25			* month, week, day, hour, minute, second
26			*
27			* Valid units of size:
28			* megabyte/mbyte/mb, kilobyte/kbyte/kb, byte
29			*
30			* Sizes and times may be singular or plural.
31			*/
32
33			/* EFNET NOTE:
34			*
35			* This config file is NOT suitable for EFNet. EFNet admins should use
36			* example.efnet.conf
37			*/
38
39			serverinfo {
40			name = "hades.arpa";
41			sid = "_CHANGE_ME_";
42			description = "hybrid-7 test server";
43			network_name = "MyNet";
44			network_desc = "This is My Network";
45			hub = no;
46			#vhost = "192.169.0.1";
47			#vhost6 = "3ffe:80e8:546::2";
48			max_clients = 512;
49			#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
50			#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
51			};
52
53			/* admin {}: contains admin information about the server. (OLD A:) */
54			admin {
55			name = "Smurf target";
56			description = "Main Server Administrator";
57			email = "<syn@packets.r.us>";
58			};
59
60			/* class {}: contain information about classes for users (OLD Y:) */
61			class {
62			name = "users";
63			ping_time = 2 minutes;
64			number_per_ip = 2;
65			max_number = 100;
66			sendq = 100 kbytes;
67			};
68
69			class {
70			name = "restricted";
71			ping_time = 1 minute 30 seconds;
72			number_per_ip = 1;
73			max_number = 100;
74			sendq = 60kb;
75			};
76
77			class {
78			name = "opers";
79			ping_time = 5 minutes;
80			number_per_ip = 10;
81			max_number = 100;
82			sendq = 100kbytes;
83			};
84
85			class {
86			name = "server";
87			ping_time = 5 minutes;
88			ping_warning = 15 seconds;
89			connectfreq = 5 minutes;
90			max_number = 1;
91			sendq=2 megabytes;
92			};
93
94			/* listen {}: contain information about the ports ircd listens on (OLD P:) */
95			listen {
96			port = 6665 .. 6669;
97
98			flags = ssl;
99			port = 6697;
100
101			host = "1.2.3.4";
102			port = 7000, 7001;
103
104			host = "3ffe:1234:a:b:c::d";
105			port = 7002;
106			};
107
108			/* auth {}: allow users to connect to the ircd (OLD I:) */
109			auth {
110			user = "*@172.16.0.0/12";
111			user = "test@123D:B567:";
112			password = "letmein";
113			flags = need_password, spoof_notice, exceed_limit, kline_exempt,
114			gline_exempt, no_tilde;
115			spoof = "I.still.hate.packets";
116			class = "opers";
117			};
118
119			auth {
120			redirserv = "irc.fi";
121			redirport = 6667;
122			user = "*.fi";
123			class = "users";
124			};
125
126			auth {
127			user = "@";
128			class = "users";
129			flags = need_ident;
130			};
131
132			/* operator {}: defines ircd operators. (OLD O:)
133			* ircd-hybrid no longer supports local operators, privileges are
134			* controlled via flags.
135			*/
136			operator {
137			name = "god";
138			user = "god@";
139			user = "*@127.0.0.1";
140			password = "etcnjl8juSU1E";
141			encrypted = yes;
142			#rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
143			class = "opers";
144	michael	1228	flags = global_kill, remote, kline, unkline, gline, module,
145	db	897	xline, die, rehash, nick_changes, admin;
146			};
147
148			/* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
149			connect {
150			name = "irc.uplink.com";
151			host = "192.168.0.1";
152			send_password = "password";
153			accept_password = "anotherpassword";
154			encrypted = no;
155			port = 6666;
156			hub_mask = "*";
157			#leaf_mask = "*.uk";
158			class = "server";
159			flags = autoconn;
160			};
161
162			connect {
163			name = "encrypted.auth.example";
164			host = "some.host.somewhere";
165			port = 6667;
166
167			flags = cryptlink;
168			rsa_public_key_file = "etc/remote.server.keyfile";
169			#cipher_preference = "BF/168";
170			};
171
172			connect {
173			name = "ipv6.some.server";
174			host = "3ffd:dead:beef::1";
175			send_password = "password";
176			accept_password = "password";
177			port = 6666;
178
179			aftype = ipv6;
180			class = "server";
181			};
182
183			/* cluster{}: servers that share klines/unkline/xline/unxline/resv/unresv/locops
184			* automatically (OLD hyb6 SLAVE_SERVERS)
185			*/
186			cluster {
187			/* name: the server to share with, this can take wildcards */
188			/* NOTE: only local actions will be clustered, meaning if
189			* the server receives a shared kline/unkline/etc, it
190			* will not be propagated to clustered servers.
191			*/
192			name = "*.arpa";
193
194			/* type: list of what to share, options are as follows:
195			* kline - share klines
196			* unkline - share unklines
197			* xline - share xlines
198			* unxline - share unxlines
199			* resv - share resvs
200			* unresv - share unresvs
201			* locops - share locops
202			* all - share all of the above
203			*/
204			type = kline, unkline, locops, xline, resv;
205			};
206
207			/* shared {}: users that are allowed to remote kline (OLD U:) */
208			shared {
209			name = "irc2.some.server";
210			user = "oper@my.host.is.spoofed";
211			type = all;
212			};
213
214			/* kill {}: users that are not allowed to connect (OLD K:)
215			* Oper issued klines will be added to the specified kline config
216			*/
217			kill {
218			user = "bad@*.hacked.edu";
219			reason = "Obviously hacked account";
220			};
221
222			/* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
223			* Oper issued dlines will be added to the specified dline config
224			*/
225			deny {
226			ip = "10.0.1.0/24";
227			reason = "Reconnecting vhosted bots";
228			};
229
230			/* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) */
231			exempt {
232			ip = "192.168.0.0/16";
233			};
234
235			/* resv {}: nicks and channels users may not use/join (OLD Q:) */
236			resv {
237			nick = "nickserv";
238			nick = "chanserv";
239			channel = "#services";
240			reason = "Clone bots";
241			nick = "clone*";
242			};
243
244			gecos {
245			name = "sex";
246			reason = "Possible spambot";
247			};
248
249			gecos {
250			name = "sub7server";
251			reason = "Trojan drone";
252			};
253
254			gecos {
255			name = "http";
256			reason = "Spambot";
257			};
258
259			channel {
260			restrict_channels = no;
261			disable_local_channels = no;
262			use_invex = yes;
263			use_except = yes;
264			use_knock = yes;
265			knock_delay = 5 minutes;
266			knock_delay_channel = 1 minute;
267			burst_topicwho = yes;
268			max_chans_per_user = 15;
269			quiet_on_ban = yes;
270			max_bans = 25;
271			join_flood_count = 16;
272			join_flood_time = 8 seconds;
273			default_split_user_count = 0;
274			default_split_server_count = 0;
275			no_create_on_split = yes;
276			no_join_on_split = no;
277			};
278
279			serverhide {
280			flatten_links = no;
281			links_delay = 5 minutes;
282			hidden = no;
283			disable_hidden = no;
284			hide_servers = no;
285			hidden_name = "*.hidden.com";
286			hide_server_ips = no;
287			};
288
289			general {
290	michael	1074	kill_chase_time_limit = 90 seconds;
291	db	897	hide_spoof_ips = yes;
292			ignore_bogus_ts = no;
293
294			disable_auth = no;
295			disable_remote_commands = no;
296			default_floodcount = 10;
297			failed_oper_notice = yes;
298			dots_in_ident=2;
299			min_nonwildcard = 4;
300			min_nonwildcard_simple = 3;
301			max_accept = 20;
302			anti_nick_flood = yes;
303
304			max_nick_time = 20 seconds;
305			max_nick_changes = 5;
306
307			anti_spam_exit_message_time = 5 minutes;
308			ts_warn_delta = 30 seconds;
309			ts_max_delta = 5 minutes;
310
311			kline_with_reason = yes;
312			kline_with_connection_closed = no;
313			reject_hold_time = 0;
314
315			invisible_on_connect = yes;
316			warn_no_nline = yes;
317			stats_o_oper_only=yes;
318			stats_P_oper_only=no;
319			stats_i_oper_only=masked;
320			stats_k_oper_only=masked;
321			caller_id_wait = 1 minute;
322			pace_wait_simple = 1 second;
323			pace_wait = 10 seconds;
324			short_motd = no;
325			ping_cookie = no;
326			no_oper_flood = yes;
327			true_no_oper_flood = yes;
328			oper_pass_resv = yes;
329	michael	1176
330	db	897	/* REMOVE ME. The following line checks you've been reading. */
331			havent_read_conf = 1;
332
333			max_targets = 4;
334			client_flood = 2560;
335			message_locale = "standard";
336			oper_only_umodes = bots, cconn, debug, full, skill, nchange,
337			rej, spy, external, operwall, locops, unauth;
338
339			oper_umodes = bots, locops, servnotice, operwall, wallop;
340
341
342			#servlink_path = "/usr/local/ircd/bin/servlink";
343			#default_cipher_preference = "BF/168";
344			#use_egd = yes;
345			#egdpool_path = "/var/run/egd-pool";
346			#compression_level = 6;
347			throttle_time = 10;
348			};
349
350			glines {
351			enable = yes;
352			duration = 1 day;
353	michael	1247	log = reject;
354	db	897
355			user = "god@I.still.hate.packets";
356			name = "hades.arpa";
357			action = reject, block;
358
359			user = "god@*";
360			name = "*";
361			action = block;
362			};
363
364			modules {
365	michael	1070	path = "/usr/local/ircd/lib/ircd-hybrid/modules";
366			path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
367	db	897	#module = "some_module.so";
368			};
369	michael	1247
370			/*
371			* log {}: contains information about logfiles.
372			*/
373			log {
374			/* Do you want to enable logging to ircd.log? */
375			use_logging = yes;
376			timestamp = yes;
377
378			file {
379			type = oper;
380			name = "/home/ircd/var/log/oper.log";
381			size = 50 megabytes;
382			};
383
384			file {
385			type = user;
386			name = "/home/ircd/var/log/oper.log";
387			size = 50 megabytes;
388			};
389
390			file {
391			type = kill;
392			name = "/home/ircd/var/log/kill.log";
393			size = 50 megabytes;
394			};
395
396			file {
397			type = kline;
398			name = "/home/ircd/var/log/kline.log";
399			size = 50 megabytes;
400			};
401
402			file {
403			type = dline;
404			name = "/home/ircd/var/log/dline.log";
405			size = 50 megabytes;
406			};
407
408			file {
409			type = gline;
410			name = "/home/ircd/var/log/gline.log";
411			size = 50 megabytes;
412			};
413
414			file {
415			type = debug;
416			name = "/home/ircd/var/log/debug.log";
417			size = 50 megabytes;
418			};
419			};