ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid/trunk/doc/reference.conf

Comparing:
ircd-hybrid-7.2/etc/example.conf.in (file contents), Revision 897 by db, Sat Nov 3 17:13:32 2007 UTC vs.
ircd-hybrid-8/doc/example.conf (file contents), Revision 1460 by michael, Fri Jul 6 14:32:53 2012 UTC

#	Line 1 | Line 1
1	<	/* doc/example.conf - ircd-hybrid-7 Example configuration file
2	<	* Copyright (C) 2000-2006 Hybrid Development Team
1	>	/* doc/example.conf - ircd-hybrid-8 Example configuration file
2	>	* Copyright (C) 2000-2012 Hybrid Development Team
3		*
4		* Written by ejb, wcampbel, db, leeh and others
5		* Other example configurations can be found in the source dir under
#	Line 39 | Line 39
39		*/
40
41		/*
42	<	* serverinfo {}:  contains information about the server. (OLD M:)
42	>	* serverinfo {}:  contains information about the server
43		*/
44		serverinfo {
45		/*
46	<	* name: the name of our server.  This cannot be changed at runtime.
46	>	* name: the name of this server.  This cannot be changed at runtime.
47		*/
48		name = "hades.arpa";
49
#	Line 76 | Line 76 | serverinfo {
76
77		/*
78		* vhost: the IP to bind to when we connect outward to ipv4 servers.
79	<	* This should be an ipv4 IP only, or "* for INADDR_ANY.
79	>	* This should be an ipv4 IP only, or "*" for INADDR_ANY.
80		*/
81		#vhost = "192.169.0.1";
82
83		/*
84		* vhost6: the IP to bind to when we connect outward to ipv6 servers.
85	<	* This should be an ipv6 IP only, or "* for INADDR_ANY.
85	>	* This should be an ipv6 IP only, or "*" for INADDR_ANY.
86		*/
87		#vhost6 = "3ffe:80e8:546::2";
88
#	Line 90 | Line 90 | serverinfo {
90		max_clients = 512;
91
92		/*
93	<	* rsa key: the path to the file containing our rsa key for cryptlink.
93	>	* rsa_private_key_file: the path to the file containing our
94	>	* rsa key for cryptlink.
95		*
96		* Example command to store a 2048 bit RSA keypair in
97		* rsa.key, and the public key in rsa.pub:
98		*
99	<	*      openssl genrsa -out rsa.key 2048
99	>	*      openssl genrsa -out rsa.key 2048
100		*      openssl rsa -in rsa.key -pubout -out rsa.pub
101		*      chown <ircd-user>.<ircd.group> rsa.key rsa.pub
102		*      chmod 0600 rsa.key
#	Line 104 | Line 105 | serverinfo {
105		#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
106
107		/*
108	<	* ssl certificate: the path to the file containing our ssl certificate
109	<	* for encrypted client connection.
108	>	* ssl_certificate_file: the path to the file containing our
109	>	* ssl certificate for encrypted client connection.
110		*
111		* This assumes your private RSA key is stored in rsa.key. You
112		* MUST have an RSA key in order to generate the certificate
#	Line 122 | Line 123 | serverinfo {
123		*      E-mail: you@domain.com
124		*/
125		#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
126	+
127	+
128	+	/*
129	+	* ssl_dh_param_file:
130	+	*
131	+	* Path to the PEM encoded Diffie-Hellman parameter file.
132	+	* DH parameters are strictly required when using ciphers
133	+	* with EDH (ephemeral Diffie-Hellman) key exchange.
134	+	*
135	+	* A DH parameter file can be created by running:
136	+	*
137	+	*      openssl dhparam -out dhparam.pem 1024
138	+	*
139	+	* Further information regarding specific OpenSSL dhparam
140	+	* command-line options can be found in the OpenSSL manual.
141	+	*/
142	+	#ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
143	+
144	+	/*
145	+	* ssl_cipher_list:
146	+	*
147	+	* List of ciphers that are supported by _this_ server. Can be used to enforce
148	+	* specific ciphers for incoming SSL/TLS connections.
149	+	* If a client (which also includes incoming server connections) isn't capable
150	+	* of any cipher listed below, the connection will simply be rejected.
151	+	*
152	+	* A list of supported ciphers can be obtained by running:
153	+	*
154	+	*      openssl ciphers -ssl3 -tls1 -v
155	+	*
156	+	* Multiple ciphers are separated by colons. The order of preference is from
157	+	* left to right.
158	+	*/
159	+	#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
160	+
161	+	/*
162	+	* ssl_server_method:
163	+	* ssl_client_method:
164	+	*
165	+	* SSL/TLS methods we provide for incoming (server method) and
166	+	* outgoing (client method) SSL/TLS connections.
167	+	* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
168	+	* SSLv2 is not suppported.
169	+	*/
170	+	#ssl_server_method = tlsv1, sslv3;
171	+	#ssl_client_method = tlsv1;
172		};
173
174		/*
175	<	* admin {}:  contains admin information about the server. (OLD A:)
175	>	* admin {}:  contains admin information about the server
176		*/
177		admin {
178		name = "Smurf target";
#	Line 134 | Line 181 | admin {
181		};
182
183		/*
184	<	* log {}:  contains information about logfiles.
138	<	*/
139	<	log {
140	<	/* Do you want to enable logging to ircd.log? */
141	<	use_logging = yes;
142	<
143	<	/*
144	<	* logfiles: the logfiles to use for user connects, /oper uses,
145	<	* and failed /oper.  These files must exist for logging to be used.
146	<	*/
147	<	fname_userlog = "logs/userlog";
148	<	fname_operlog = "logs/operlog";
149	<	fname_killlog = "logs/kill";
150	<	fname_klinelog = "logs/kline";
151	<	fname_glinelog = "logs/gline";
152	<
153	<	/*
154	<	* log_level: the amount of detail to log in ircd.log.  The
155	<	* higher, the more information is logged.  May be changed
156	<	* once the server is running via /quote SET LOG.  Either:
157	<	* L_CRIT, L_ERROR, L_WARN, L_NOTICE, L_TRACE, L_INFO or L_DEBUG
158	<	*/
159	<	log_level = L_INFO;
160	<	};
161	<
162	<	/*
163	<	* class {}:  contains information about classes for users (OLD Y:)
184	>	* class {}:  contains information about classes for users
185		*/
186		class {
187		/* name: the name of the class.  classes are text now */
#	Line 214 | Line 235 | class {
235		ping_time = 90 seconds;
236		number_per_ip = 10;
237		max_number = 100;
238	<	sendq = 100kbytes;
238	>	sendq = 100 kbytes;
239		};
240
241		class {
#	Line 241 | Line 262 | class {
262		};
263
264		/*
265	<	* listen {}:  contains information about the ports ircd listens on (OLD P:)
265	>	* listen {}:  contains information about the ports ircd listens on
266		*/
267		listen {
268		/*
#	Line 259 | Line 280 | listen {
280		* unless you are an administrator.
281		*
282		* NOTE: The "flags" directive has to come before "port".  Always!
283	+	*
284	+	* Currently available flags are:
285	+	*
286	+	*  ssl    - Port is for SSL client connections only
287	+	*  server - Only server connections are permitted
288	+	*  hidden - Port is hidden from /stats P, unless you're an admin
289		*/
290		flags = hidden, ssl;
291		host = "192.168.0.1";
#	Line 276 | Line 303 | listen {
303		};
304
305		/*
306	<	* auth {}:  allow users to connect to the ircd (OLD I:)
306	>	* auth {}:  allow users to connect to the ircd
307		*/
308		auth {
309		/*
#	Line 305 | Line 332 | auth {
332		class = "opers";
333
334		/*
335	<	* need_password: don't allow users who haven't supplied the correct
336	<	*                password to connect using another auth{} block
337	<	*                ('&' prefix on /stats I if disabled)
338	<	* need_ident:    require the user to have identd to connect ('+' prefix on /stats I)
339	<	* spoof_notice:  enable spoofing notification to admins
340	<	* exceed_limit:  allow a user to exceed class limits ('>' prefix on /stats I)
341	<	* kline_exempt:  exempt this user from k/glines ('^' prefix on /stats I)
342	<	* gline_exempt:  exempt this user from glines ('_' prefix on /stats I)
343	<	* resv_exempt:   exempt this user from resvs ('$' prefix on /stats I)
344	<	* no_tilde:      remove ~ from a user with no ident ('-' prefix on /stats I)
345	<	* can_flood:     allow this user to exceed flood limits ('|' prefix on /stats I)
319	<	* can_idle:      exempt this user from idle restrictions ('<' prefix on /stats I)
335	>	* need_password - don't allow users who haven't supplied the correct
336	>	*                 password to connect using another auth{} block
337	>	*                 ('&' prefix on /stats I if disabled)
338	>	* need_ident    - require the user to have identd to connect ('+' prefix on /stats I)
339	>	* spoof_notice  - enable spoofing notification to admins
340	>	* exceed_limit  - allow a user to exceed class limits ('>' prefix on /stats I)
341	>	* kline_exempt  - exempt this user from k/glines ('^' prefix on /stats I)
342	>	* gline_exempt  - exempt this user from glines ('_' prefix on /stats I)
343	>	* resv_exempt   - exempt this user from resvs ('$' prefix on /stats I)
344	>	* no_tilde      - remove ~ from a user with no ident ('-' prefix on /stats I)
345	>	* can_flood     - allow this user to exceed flood limits ('|' prefix on /stats I)
346		*/
347		flags = need_password, spoof_notice, exceed_limit, kline_exempt,
348	<	gline_exempt, resv_exempt, no_tilde, can_flood, can_idle;
348	>	gline_exempt, resv_exempt, no_tilde, can_flood;
349		};
350
351		auth {
#	Line 344 | Line 370 | auth {
370		};
371
372		/*
373	<	* operator {}:  defines ircd operators. (OLD O:)
373	>	* operator {}:  defines ircd operators
374		*
375		* ircd-hybrid no longer supports local operators, privileges are
376		* controlled via flags.
377		*/
378		operator {
379		/* name: the name of the oper */
354	–	/* NOTE: operator "opername"{} is also supported */
380		name = "god";
381
382		/*
383	<	* user: the user@host required for this operator.  CIDR is not
384	<	* supported.  Multiple user="" lines are supported.
383	>	* user: the user@host required for this operator. Multiple
384	>	* user="" lines are supported.
385		*/
386	<	user = "*god@*";
387	<	user = "*@127.0.0.1";
386	>	user = "*god@192.168.0.0/16";
387	>	user = "*@127.0.0.0/8";
388
389		/*
390		* password: the password required to oper.  By default this will
391	<	* need to be encrypted using 'mkpasswd'.  MD5 is supported.
391	>	* need to be encrypted by using the provided mkpasswd tool.
392	>	* Several password hash algorithms are available depending
393	>	* on your system's crypt() implementation. For example, a modern
394	>	* glibc already has support for SHA-256/512, and MD5 encryption
395	>	* algorithms.
396		*/
397	<	password = "etcnjl8juSU1E";
397	>	password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4";
398
399		/*
400		* encrypted: controls whether the oper password above has been
401	<	* encrypted.  (OLD CRYPT_OPER_PASSWORD now optional per operator)
401	>	* encrypted.
402		*/
403		encrypted = yes;
404
#	Line 390 | Line 419 | operator {
419		*
420		* +b - bots         - See bot and drone flooding notices
421		* +c - cconn        - Client connection/quit notices
422	+	* +C - cconn_full   - Client connection/quit notices full
423		* +D - deaf         - Don't receive channel messages
424		* +d - debug        - See debugging notices
425	<	* +f - full         - See I: line full notices
425	>	* +f - full         - See auth{} block full notices
426		* +G - softcallerid - Server Side Ignore for users not on your channels
427		* +g - callerid     - Server Side Ignore (for privmsgs etc)
428	+	* +H - hidden       - Hides operator status to other users
429		* +i - invisible    - Not shown in NAMES or WHO unless you share a
430		*                     a channel
431	+	* +j - rej          - See rejected client notices
432		* +k - skill        - See server generated KILL messages
433		* +l - locops       - See LOCOPS messages
434		* +n - nchange      - See client nick changes
403	–	* +r - rej          - See rejected client notices
435		* +s - servnotice   - See general server notices
436		* +u - unauth       - See unauthorized client notices
437		* +w - wallop       - See server generated WALLOPS
#	Line 412 | Line 443 | operator {
443
444		/*
445		* privileges: controls the activities and commands an oper is
446	<	* allowed to do on the server.  All options default to no.
446	>	* allowed to do on the server. All options default to no.
447		* Available options:
448		*
449	<	* global_kill:  allows remote users to be /KILL'd (OLD 'O' flag)
450	<	* remote:       allows remote SQUIT and CONNECT   (OLD 'R' flag)
451	<	* remoteban:    allows remote KLINE/UNKLINE
452	<	* kline:        allows KILL, KLINE and DLINE      (OLD 'K' flag)
453	<	* unkline:      allows UNKLINE and UNDLINE        (OLD 'U' flag)
454	<	* gline:        allows GLINE                      (OLD 'G' flag)
455	<	* xline:         allows XLINE                     (OLD 'X' flag)
456	<	* operwall:     allows OPERWALL
457	<	* nick_changes: allows oper to see nickchanges    (OLD 'N' flag)
458	<	*               via usermode +n
459	<	* rehash:       allows oper to REHASH config      (OLD 'H' flag)
460	<	* die:          allows DIE and RESTART            (OLD 'D' flag)
461	<	* admin:        gives admin privileges.  admins
462	<	*               may (un)load modules and see the
463	<	*               real IPs of servers.
464	<	* hidden_admin: same as 'admin', but noone can recognize you as
465	<	*               being an admin
466	<	* hidden_oper:  not shown in /stats p (except for other operators)
467	<	*/
468	<	/* You can either use
469	<	* die = yes;
470	<	* rehash = yes;
471	<	*
472	<	* or in a flags statement i.e.
473	<	* flags = die, rehash;
474	<	*
475	<	* You can also negate a flag with ~ i.e.
445	<	* flags = ~remote;
446	<	*
447	<	*/
448	<	flags = global_kill, remote, kline, unkline, xline,
449	<	die, rehash, nick_changes, admin, operwall;
449	>	* module       - allows MODULE
450	>	* global_kill  - allows remote users to be /KILL'd
451	>	* remote       - allows remote SQUIT and CONNECT
452	>	* remoteban    - allows remote KLINE/UNKLINE
453	>	* dline        - allows DLINE
454	>	* undline      - allows UNDLINE
455	>	* kline        - allows KILL and KLINE
456	>	* unkline      - allows UNKLINE
457	>	* gline        - allows GLINE
458	>	* xline        - allows XLINE
459	>	* globops      - allows GLOBOPS
460	>	* operwall     - allows OPERWALL
461	>	* nick_changes - allows oper to see nickchanges via usermode +n
462	>	* rehash       - allows oper to REHASH config
463	>	* die          - allows DIE
464	>	* restart      - allows RESTART
465	>	* set          - allows SET
466	>	* admin        - gives admin privileges. admins for example,
467	>	*                may see the real IP addresses of servers.
468	>	*/
469	>	flags = global_kill, remote, kline, unkline, xline, globops, restart,
470	>	die, rehash, nick_changes, admin, operwall, module;
471	>	};
472	>
473	>	service {
474	>	name = "service.someserver";
475	>	name = "stats.someserver";
476		};
477
478		/*
479	<	* connect {}:  controls servers we connect to (OLD C:, N:, H:, L:)
479	>	* connect {}:  controls servers we connect to
480		*/
481		connect {
482		/* name: the name of the server */
#	Line 478 | Line 504 | connect {
504
505		/*
506		* encrypted: controls whether the accept_password above has been
507	<	* encrypted.  (OLD CRYPT_LINK_PASSWORD now optional per connect)
507	>	* encrypted.
508		*/
509		encrypted = no;
510
#	Line 497 | Line 523 | connect {
523		*/
524		#       leaf_mask = "*.uk";
525
500	–	/* fakename: the servername we pretend to be when we connect */
501	–	#       fakename = "*.arpa";
502	–
526		/* class: the class this server is in */
527		class = "server";
528
529	+	#ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
530	+
531		/*
532	<	* autoconn:    controls whether we autoconnect to this server or not,
533	<	*              dependent on class limits.  By default, this is disabled.
534	<	* compressed:  controls whether traffic is compressed via ziplinks.
535	<	*              By default, this is disabled
511	<	* cryptlink:   enable full encryption for all data passing between our
512	<	*              server and this link and rsa authentication.
513	<	* burst_away:  This will send the /away string that users have set
514	<	*              on the server burst.  Note this can be a lot of data
532	>	* autoconn   - controls whether we autoconnect to this server or not,
533	>	*              dependent on class limits. By default, this is disabled.
534	>	* burst_away - This will send the /away string that users have set
535	>	*              on the server burst. Note this can be a lot of data
536		*              and slow down your server burst.
537	<	* topicburst:  Send topics to this server during channel burst.  Works
537	>	* topicburst - Send topics to this server during channel burst. Works
538		*              only if the server we are connecting to is capable
539		*              of TBURST/TB.
540	+	* ssl        - Initiates a TLS/SSL connection.
541		*/
542	<	#       flags = autoconn, compressed, cryptlink, burst_away, topicburst;
542	>	#       flags = autoconn, burst_away, topicburst;
543		};
544
545		connect {
546	<	name = "encrypted.auth.example";
525	<	host = "some.host.somewhere";
526	<	port = 6667;
527	<
528	<	flags = cryptlink;
529	<
530	<	/*
531	<	* rsa_public_key_file: the path to the public keyfile of the server.
532	<	* Used instead of passwords.
533	<	*/
534	<	rsa_public_key_file = "etc/remote.server.keyfile";
535	<
536	<	/*
537	<	* cipher preference: set the preferred cipher for this link
538	<	*
539	<	* Available ciphers are:
540	<	*      BF/168 BF/128 CAST/128 IDEA/128 RC5.16/128
541	<	*      RC5.12/128 RC5.8/128 3DES/168 DES/56
542	<	*
543	<	* NOTE:  Some ciphers may not be supported by your OpenSSL.
544	<	*        Check the output from 'configure' for available ciphers.
545	<	*
546	<	* NOTE2: To help you decide what cipher to use, tools/encspeed
547	<	*        will show you approximately how fast each cipher is.
548	<	*        However, blowfish is fast and secure, and is probably
549	<	*        a good default for most situations.
550	<	*
551	<	* NOTE3: Default if none is set is BF/128
552	<	*
553	<	* The cipher *MUST* be the same in both directions.  If you
554	<	* set a cipher preference, your uplink must set the same cipher,
555	<	* else it will not link.
556	<	*/
557	<	#       cipher_preference = "BF/168";
558	<	};
559	<
560	<	/*
561	<	* NOTE: Don't add an extra 'name=' entry if you use
562	<	* the connect "name"{} feature
563	<	*/
564	<	connect "ipv6.some.server" {
546	>	name = "ipv6.some.server";
547		host = "3ffd:dead:beef::1";
548		send_password = "password";
549		accept_password = "password";
#	Line 577 | Line 559 | connect "ipv6.some.server" {
559
560		/*
561		* cluster {}:  servers that share klines/unkline/xline/unxline/resv/unresv/locops
562	<	* automatically (OLD hyb6 SLAVE_SERVERS)
562	>	* automatically
563		*/
564		cluster {
565		/*
#	Line 595 | Line 577 | cluster {
577
578		/*
579		* type: list of what to share, options are as follows:
580	<	*      kline   - share klines
581	<	*      tkline  - share temporary klines
582	<	*      unkline - share unklines
583	<	*      xline   - share xlines
584	<	*      txline  - share temporary xlines
585	<	*      unxline - share unxlines
586	<	*      resv    - share resvs
587	<	*      tresv   - share temporary resvs
588	<	*      unresv  - share unresvs
589	<	*      locops  - share locops
608	<	*      all     - share all of the above (default)
580	>	*      dline   - share dlines
581	>	*      undline - share undlines
582	>	*      kline   - share klines
583	>	*      unkline - share unklines
584	>	*      xline   - share xlines
585	>	*      unxline - share unxlines
586	>	*      resv    - share resvs
587	>	*      unresv  - share unresvs
588	>	*      locops  - share locops
589	>	*      all     - share all of the above (default)
590		*/
591		type = kline, unkline, locops, xline, resv;
592		};
593
594		/*
595	<	* shared {}: users that are allowed to remote kline (OLD U:)
595	>	* shared {}: users that are allowed to remote kline
596		*
597		* NOTE: This can be effectively used for remote klines.
598		*       Please note that there is no password authentication
#	Line 634 | Line 615 | shared {
615
616		/*
617		* type: list of what to share, options are as follows:
618	<	*      kline   - allow oper/server to kline
619	<	*      tkline  - allow temporary klines
620	<	*      unkline - allow oper/server to unkline
621	<	*      xline   - allow oper/server to xline
622	<	*      txline  - allow temporary xlines
623	<	*      unxline - allow oper/server to unxline
624	<	*      resv    - allow oper/server to resv
625	<	*      tresv   - allow temporary resvs
645	<	*      unresv  - allow oper/server to unresv
618	>	*      dline   - allow oper/server to dline
619	>	*      undline - allow oper/server to undline
620	>	*      kline   - allow oper/server to kline
621	>	*      unkline - allow oper/server to unkline
622	>	*      xline   - allow oper/server to xline
623	>	*      unxline - allow oper/server to unxline
624	>	*      resv    - allow oper/server to resv
625	>	*      unresv  - allow oper/server to unresv
626		*      locops  - allow oper/server to locops - only used for servers that cluster
627	<	*      all     - allow oper/server to do all of the above (default)
627	>	*      all     - allow oper/server to do all of the above (default)
628		*/
629		type = kline, unkline, resv;
630		};
631
632		/*
633	<	* kill {}:  users that are not allowed to connect (OLD K:)
633	>	* kill {}:  users that are not allowed to connect
634		* Oper issued klines will be added to the specified kline config
635		*/
636		kill {
#	Line 659 | Line 639 | kill {
639		};
640
641		kill {
642	<	user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$";
642	>	user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$";
643	>
644	>	/*
645	>	* NOTE: You have to set type=regex; when using a regular expression
646	>	* based user entry
647	>	*/
648		type = regex;
649		};
650
#	Line 673 | Line 658 | deny {
658		};
659
660		/*
661	<	* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:)
661	>	* exempt {}: IPs that are exempt from deny {} and Dlines
662		*/
663		exempt {
664		ip = "192.168.0.0/16";
665		};
666
667		/*
668	<	* resv {}:  nicks and channels users may not use/join (OLD Q:)
668	>	* resv {}:  nicks and channels users may not use/join
669		*/
670		resv {
671		/* reason: the reason for the proceeding resv's */
672	<	reason = "There are no services on this network";
672	>	reason = "Reserved for services";
673
674		/* resv: the nicks and channels users may not join/use */
675	<	nick = "nickserv";
676	<	nick = "chanserv";
675	>	nick = "Global";
676	>	nick = "DevNull";
677	>	nick = "Services";
678	>	nick = "StatServ";
679	>	nick = "HostServ";
680	>	nick = "NickServ";
681	>	nick = "ChanServ";
682	>	nick = "MemoServ";
683	>	nick = "OperServ";
684		channel = "#services";
685
686		/* resv: wildcard masks are also supported in nicks only */
#	Line 717 | Line 709 | gecos {
709
710		gecos {
711		name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$";
712	+
713	+	/*
714	+	* NOTE: You have to set type=regex; when using a regular expression
715	+	* based name entry
716	+	*/
717		type = regex;
718		};
719
#	Line 731 | Line 728 | channel {
728		*
729		*   2 | bold
730		*   3 | mirc color
731	<	*  15 | plain text
731	>	*  15 | plain text
732		*  22 | reverse
733	+	*  29 | italic
734		*  31 | underline
735		* 160 | non-breaking space
736		*/
#	Line 772 | Line 770 | channel {
770		* knock_delay: The amount of time a user must wait between issuing
771		* the knock command.
772		*/
773	<	knock_delay = 1 minutes;
773	>	knock_delay = 5 minutes;
774
775		/*
776		* knock_delay_channel: How often a knock to any specific channel
#	Line 781 | Line 779 | channel {
779		knock_delay_channel = 1 minute;
780
781		/*
782	<	* burst_topicwho: enable sending of who set topic on topicburst
783	<	* default is yes
782	>	* max_chans_per_user: The maximum number of channels a user can
783	>	* join/be on.
784		*/
785	<	burst_topicwho = yes;
785	>	max_chans_per_user = 25;
786
787		/*
788	<	* max_chans_per_user: The maximum number of channels a user can
788	>	* max_chans_per_oper: The maximum number of channels an oper can
789		* join/be on.
790		*/
791	<	max_chans_per_user = 25;
791	>	max_chans_per_oper = 50;
792
793		/* quiet_on_ban: stop banned people talking in channels. */
794		quiet_on_ban = yes;
#	Line 826 | Line 824 | channel {
824		*/
825		default_split_server_count = 0;
826
827	<	/* split no create: disallow users creating channels on split. */
827	>	/* no_create_on_split: disallow users creating channels on split. */
828		no_create_on_split = yes;
829
830	<	/* split: no join: disallow users joining channels at all on a split */
830	>	/* no_join_on_split: disallow users joining channels at all on a split. */
831		no_join_on_split = no;
832		};
833
#	Line 874 | Line 872 | serverhide {
872		hidden_name = "*.hidden.com";
873
874		/*
875	<	* hide_server_ips: If this is disabled, opers will be unable to see servers
876	<	* ips and will be shown a masked ip, admins will be shown the real ip.
877	<	*
878	<	* If this is enabled, nobody can see a servers ip.  *This is a kludge*, it
879	<	* has the side effect of hiding the ips everywhere, including logfiles.
875	>	* hide_server_ips: If this is disabled, opers will be unable to see
876	>	* servers ips and will be shown a masked ip, admins will be shown the
877	>	* real ip.
878	>	*
879	>	* If this is enabled, nobody can see a servers ip. *This is a kludge*,
880	>	* it has the side effect of hiding the ips everywhere, including
881	>	* logfiles.
882		*
883		* We recommend you leave this disabled, and just take care with who you
884		* give admin=yes; to.
#	Line 891 | Line 891 | serverhide {
891		* compiled in options in config.h.  The general block is read at start time.
892		*/
893		general {
894	<	/* max_watch: maximum WATCH entries */
895	<	max_watch = 64;
894	>	/* services_name: servername of nick/channel services */
895	>	services_name = "service.someserver";
896	>
897	>	/* max_watch: maximum WATCH entries a client can have. */
898	>	max_watch = 60;
899	>
900	>	/* gline_enable: enable glines, network wide temp klines */
901	>	gline_enable = yes;
902	>
903	>	/*
904	>	* gline_duration: the amount of time a gline will remain on your
905	>	* server before expiring
906	>	*/
907	>	gline_duration = 1 day;
908	>
909	>	/*
910	>	* gline_request_duration:  how long a pending G-line can be around.
911	>	* 10 minutes should be plenty
912	>	*/
913	>	gline_request_duration = 10 minutes;
914
915		/*
916		* gline_min_cidr: the minimum required length of a CIDR bitmask
#	Line 912 | Line 930 | general {
930		invisible_on_connect = yes;
931
932		/*
915	–	* If you don't explicitly specify burst_away in your connect blocks, then
916	–	* they will default to the burst_away value below.
917	–	*/
918	–	burst_away = no;
919	–
920	–	/*
933		* Show "actually using host <ip>" on /whois when possible.
934		*/
935		use_whois_actually = yes;
936
937		/*
938		* Max time from the nickname change that still causes KILL
939	<	* automatically to switch for the current nick of that user. (seconds)
939	>	* automatically to switch for the current nick of that user.
940		*/
941	<	kill_chase_time_limit = 90;
941	>	kill_chase_time_limit = 90 seconds;
942
943		/*
944	<	* If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed
945	<	* users in /trace etc.  If this is defined they will be shown a masked IP.
944	>	* If hide_spoof_ips is disabled, opers will be allowed to see the real
945	>	* IP of spoofed users in /trace etc. If this is defined they will be
946	>	* shown a masked IP.
947		*/
948		hide_spoof_ips = yes;
949
#	Line 977 | Line 990 | general {
990		dots_in_ident = 2;
991
992		/*
980	–	* dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts
981	–	* without a '.' in them.  This will add one to the end.  Only needed
982	–	* for older servers.
983	–	*/
984	–	dot_in_ip6_addr = no;
985	–
986	–	/*
993		* min_nonwildcard: the minimum non wildcard characters in k/d/g lines
994		* placed via the server.  klines hand placed are exempt from limits.
995		* wildcard chars: '.' ':' '*' '?' '@' '!' '#'
#	Line 1123 | Line 1129 | general {
1129		/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels */
1130		oper_pass_resv = yes;
1131
1126	–	/*
1127	–	* idletime: the maximum amount of time a user may idle before
1128	–	* they are disconnected
1129	–	*/
1130	–	idletime = 0;
1131	–
1132		/* REMOVE ME.  The following line checks you've been reading. */
1133		havent_read_conf = 1;
1134
#	Line 1157 | Line 1157 | general {
1157		*
1158		* +b - bots         - See bot and drone flooding notices
1159		* +c - cconn        - Client connection/quit notices
1160	+	* +C - cconn_full   - Client connection/quit notices full
1161		* +D - deaf         - Don't receive channel messages
1162		* +d - debug        - See debugging notices
1163	<	* +f - full         - See I: line full notices
1163	>	* +f - full         - See auth{} block full notices
1164		* +G - softcallerid - Server Side Ignore for users not on your channels
1165		* +g - callerid     - Server Side Ignore (for privmsgs etc)
1166	+	* +H - hidden       - Hides operator status to other users
1167		* +i - invisible    - Not shown in NAMES or WHO unless you share a
1168		*                     a channel
1169	+	* +j - rej          - See rejected client notices
1170		* +k - skill        - See server generated KILL messages
1171		* +l - locops       - See LOCOPS messages
1172		* +n - nchange      - See client nick changes
1170	–	* +r - rej          - See rejected client notices
1173		* +s - servnotice   - See general server notices
1174		* +u - unauth       - See unauthorized client notices
1175		* +w - wallop       - See server generated WALLOPS
#	Line 1177 | Line 1179 | general {
1179		*/
1180
1181		/* oper_only_umodes: usermodes only opers may set */
1182	<	oper_only_umodes = bots, cconn, cconn_full, debug, full, skill,
1182	>	oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill,
1183		nchange, rej, spy, external, operwall,
1184		locops, unauth;
1185
#	Line 1185 | Line 1187 | general {
1187		oper_umodes = bots, locops, servnotice, operwall, wallop;
1188
1189		/*
1188	–	* servlink_path: path to 'servlink' program used by ircd to handle
1189	–	* encrypted/compressed server <-> server links.
1190	–	*
1191	–	* only define if servlink is not in same directory as ircd itself.
1192	–	*/
1193	–	#servlink_path = "/usr/local/ircd/bin/servlink";
1194	–
1195	–	/*
1196	–	* default_cipher_preference: default cipher to use for cryptlink when none is
1197	–	* specified in connect block.
1198	–	*/
1199	–	#default_cipher_preference = "BF/168";
1200	–
1201	–	/*
1190		* use_egd: if your system does not have *random devices yet you
1191		* want to use OpenSSL and encrypted links, enable this.  Beware -
1192		* EGD is *very* CPU intensive when gathering data for its pool
#	Line 1211 | Line 1199 | general {
1199		*/
1200		#       egdpool_path = "/var/run/egd-pool";
1201
1214	–
1215	–	/*
1216	–	* compression_level: level of compression for compressed links between
1217	–	* servers.
1218	–	*
1219	–	* values are between: 1 (least compression, fastest)
1220	–	*                and: 9 (most compression, slowest).
1221	–	*/
1222	–	#       compression_level = 6;
1223	–
1202		/*
1203		* throttle_time: the minimum amount of time between connections from
1204		* the same ip.  exempt {} blocks are excluded from this throttling.
#	Line 1230 | Line 1208 | general {
1208		throttle_time = 10;
1209		};
1210
1211	<	glines {
1234	<	/* enable: enable glines, network wide temp klines */
1235	<	enable = yes;
1236	<
1237	<	/*
1238	<	* duration: the amount of time a gline will remain on your
1239	<	* server before expiring
1240	<	*/
1241	<	duration = 1 day;
1242	<
1243	<	/*
1244	<	* logging: which types of rules you want to log when triggered
1245	<	* (choose reject or block)
1246	<	*/
1247	<	logging = reject, block;
1248	<
1211	>	modules {
1212		/*
1213	<	* NOTE: gline ACLs can cause a desync of glines throughout the
1214	<	* network, meaning some servers may have a gline triggered, and
1252	<	* others may not. Also, you only need insert rules for glines
1253	<	* that you want to block and/or reject. If you want to accept and
1254	<	* propagate the gline, do NOT put a rule for it.
1213	>	* path: other paths to search for modules specified below
1214	>	* and in "/module load".
1215		*/
1216	+	path = "/usr/local/ircd/lib/ircd-hybrid/modules";
1217	+	path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
1218
1219	<	/* user@host for rule to apply to */
1220	<	user = "god@I.still.hate.packets";
1259	<	/* server for rule to apply to */
1260	<	name = "hades.arpa";
1261	<
1262	<	/*
1263	<	* action: action to take when a matching gline is found. options are:
1264	<	*  reject      - do not apply the gline locally
1265	<	*  block       - do not propagate the gline
1266	<	*/
1267	<	action = reject, block;
1268	<
1269	<	user = "god@*";
1270	<	name = "*";
1271	<	action = block;
1219	>	/* module: the name of a module to load on startup/rehash */
1220	>	#module = "some_module.la";
1221		};
1222
1223	<	modules {
1224	<	/*
1225	<	* module path: other paths to search for modules specified below
1226	<	* and in /modload.
1227	<	*/
1228	<	path = "@datadir@/modules";
1280	<	path = "@datadir@/autoload";
1223	>	/*
1224	>	* log {}:  contains information about logfiles.
1225	>	*/
1226	>	log {
1227	>	/* Do you want to enable logging to ircd.log? */
1228	>	use_logging = yes;
1229
1230	<	/* module: the name of a module to load on startup/rehash */
1231	<	#module = "some_module.so";
1230	>	file {
1231	>	type = oper;
1232	>	name = "/home/ircd/var/log/oper.log";
1233	>	size = unlimited;
1234	>	};
1235	>
1236	>	file {
1237	>	type = user;
1238	>	name = "/home/ircd/var/log/user.log";
1239	>	size = 50 megabytes;
1240	>	};
1241	>
1242	>	file {
1243	>	type = kill;
1244	>	name = "/home/ircd/var/log/kill.log";
1245	>	size = 50 megabytes;
1246	>	};
1247	>
1248	>	file {
1249	>	type = kline;
1250	>	name = "/home/ircd/var/log/kline.log";
1251	>	size = 50 megabytes;
1252	>	};
1253	>
1254	>	file {
1255	>	type = dline;
1256	>	name = "/home/ircd/var/log/dline.log";
1257	>	size = 50 megabytes;
1258	>	};
1259	>
1260	>	file {
1261	>	type = gline;
1262	>	name = "/home/ircd/var/log/gline.log";
1263	>	size = 50 megabytes;
1264	>	};
1265	>
1266	>	file {
1267	>	type = debug;
1268	>	name = "/home/ircd/var/log/debug.log";
1269	>	size = 50 megabytes;
1270	>	};
1271		};

Comparing:
ircd-hybrid-7.2/etc/example.conf.in (property svn:keywords), Revision 897 by db, Sat Nov 3 17:13:32 2007 UTC vs.
ircd-hybrid-8/doc/example.conf (property svn:keywords), Revision 1460 by michael, Fri Jul 6 14:32:53 2012 UTC

#	Line 1 | Line 1
1	<	"Author Date Id Revision"
1	>	Id Revision

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)