| 1 |
|
/* doc/example.efnet.conf - ircd-hybrid-7 EFnet Example configuration file |
| 2 |
< |
* Copyright (C) 2000-2006 Hybrid Development Team |
| 2 |
> |
* Copyright (C) 2000-2010 Hybrid Development Team |
| 3 |
|
* |
| 4 |
|
* Written by ejb, wcampbel, db, leeh and others |
| 5 |
|
* Other example configurations can be found in the source dir under |
| 74 |
|
|
| 75 |
|
/* |
| 76 |
|
* hub: allow this server to act as a hub and have multiple servers |
| 77 |
< |
* connected to it. This may not be changed if there are active |
| 78 |
< |
* LazyLink servers. |
| 77 |
> |
* connected to it. |
| 78 |
|
*/ |
| 79 |
|
hub = no; |
| 80 |
|
|
| 81 |
|
/* |
| 82 |
|
* vhost: the IP to bind to when we connect outward to ipv4 servers. |
| 83 |
< |
* This should be an ipv4 IP only, or "* for INADDR_ANY. |
| 83 |
> |
* This should be an ipv4 IP only, or "*" for INADDR_ANY. |
| 84 |
|
*/ |
| 85 |
|
#vhost = "192.169.0.1"; |
| 86 |
|
|
| 87 |
|
/* |
| 88 |
|
* vhost6: the IP to bind to when we connect outward to ipv6 servers. |
| 89 |
< |
* This should be an ipv6 IP only, or "* for INADDR_ANY. |
| 89 |
> |
* This should be an ipv6 IP only, or "*" for INADDR_ANY. |
| 90 |
|
*/ |
| 91 |
|
#vhost6 = "3ffe:80e8:546::2"; |
| 92 |
|
|
| 94 |
|
max_clients = 512; |
| 95 |
|
|
| 96 |
|
/* |
| 97 |
< |
* rsa key: the path to the file containing our rsa key for cryptlink. |
| 97 |
> |
* rsa_private_key_file: the path to the file containing our |
| 98 |
> |
* rsa key for cryptlink. |
| 99 |
|
* |
| 100 |
|
* Example command to store a 2048 bit RSA keypair in |
| 101 |
|
* rsa.key, and the public key in rsa.pub: |
| 107 |
|
* chmod 0644 rsa.pub |
| 108 |
|
*/ |
| 109 |
|
#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key"; |
| 110 |
+ |
|
| 111 |
+ |
/* |
| 112 |
+ |
* ssl_certificate_file: the path to the file containing our |
| 113 |
+ |
* ssl certificate for encrypted client connection. |
| 114 |
+ |
* |
| 115 |
+ |
* This assumes your private RSA key is stored in rsa.key. You |
| 116 |
+ |
* MUST have an RSA key in order to generate the certificate |
| 117 |
+ |
* |
| 118 |
+ |
* openssl req -new -days 365 -x509 -key rsa.key -out cert.pem |
| 119 |
+ |
* |
| 120 |
+ |
* See http://www.openssl.org/docs/HOWTO/certificates.txt |
| 121 |
+ |
* |
| 122 |
+ |
* Please use the following values when generating the cert |
| 123 |
+ |
* |
| 124 |
+ |
* Organization Name: Network Name |
| 125 |
+ |
* Organization Unit Name: changme.someirc.net |
| 126 |
+ |
* Common Name: irc.someirc.net |
| 127 |
+ |
* E-mail: you@domain.com |
| 128 |
+ |
*/ |
| 129 |
+ |
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 130 |
+ |
|
| 131 |
+ |
/* |
| 132 |
+ |
* ssl_server_protocol: |
| 133 |
+ |
* SSL/TLS protocols we provide for incoming secure connections. |
| 134 |
+ |
* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1. |
| 135 |
+ |
* SSLv2 is not suppported. This cannot be changed at runtime. |
| 136 |
+ |
*/ |
| 137 |
+ |
#ssl_server_protocol = sslv3, tlsv1; |
| 138 |
|
}; |
| 139 |
|
|
| 140 |
|
/* |
| 288 |
|
port = 6665 .. 6669; |
| 289 |
|
|
| 290 |
|
/* |
| 291 |
< |
* Listen on 192.168.0.1/7023 and hidden from STATS P |
| 291 |
> |
* Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P |
| 292 |
|
* unless you are an administrator. |
| 293 |
|
* |
| 294 |
|
* NOTE: The "flags" directive has to come before "port". Always! |
| 295 |
+ |
* |
| 296 |
+ |
* Currently available flags are: |
| 297 |
+ |
* |
| 298 |
+ |
* ssl - Port is for SSL client connections only |
| 299 |
+ |
* server - Only server connections are permitted |
| 300 |
+ |
* hidden - Port is hidden from /stats P |
| 301 |
|
*/ |
| 302 |
< |
flags = hidden; |
| 302 |
> |
flags = hidden, ssl; |
| 303 |
|
host = "192.168.0.1"; |
| 304 |
< |
port = 7023; |
| 304 |
> |
port = 6697; |
| 305 |
|
|
| 306 |
|
/* |
| 307 |
|
* host: set a specific IP/host the ports after the line will listen |
| 461 |
|
* kline: allows KILL, KLINE and DLINE (OLD 'K' flag) |
| 462 |
|
* unkline: allows UNKLINE and UNDLINE (OLD 'U' flag) |
| 463 |
|
* gline: allows GLINE (OLD 'G' flag) |
| 464 |
< |
* xline: allows XLINE (OLD 'X' flag) |
| 464 |
> |
* xline: allows XLINE (OLD 'X' flag) |
| 465 |
|
* operwall: allows OPERWALL |
| 466 |
|
* nick_changes: allows oper to see nickchanges (OLD 'N' flag) |
| 467 |
|
* via usermode +n |
| 548 |
|
* dependent on class limits. By default, this is disabled. |
| 549 |
|
* compressed: controls whether traffic is compressed via ziplinks. |
| 550 |
|
* By default, this is disabled |
| 517 |
– |
* lazylink: controls whether this server is a LazyLink. LazyLink |
| 518 |
– |
* servers may NOT hub. See doc/LazyLinks.txt |
| 519 |
– |
* |
| 520 |
– |
* EFnet Note: With this enabled, you download a connect burst |
| 521 |
– |
* as it is needed, instead of all at once. This |
| 522 |
– |
* could allow servers on much smaller lines (T1s) |
| 523 |
– |
* to link a server. It also could allow a server |
| 524 |
– |
* on a DoS'ed link to stay connected. |
| 525 |
– |
* This makes client servers |
| 526 |
– |
* cheaper to run. EFnet needs more client servers. |
| 527 |
– |
* |
| 551 |
|
* cryptlink: enable full encryption for all data passing between our |
| 552 |
|
* server and this link and rsa authentication. |
| 553 |
|
* burst_away: This will send the /away string that users have set |
| 557 |
|
* only if the server we are connecting to is capable |
| 558 |
|
* of TBURST/TB. |
| 559 |
|
*/ |
| 560 |
< |
# flags = autoconn, lazylink, compressed, cryptlink, burst_away, topicburst; |
| 560 |
> |
# flags = autoconn, compressed, cryptlink, burst_away, topicburst; |
| 561 |
|
}; |
| 562 |
|
|
| 563 |
|
connect { |
| 699 |
|
}; |
| 700 |
|
|
| 701 |
|
kill { |
| 702 |
< |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$"; |
| 702 |
> |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$"; |
| 703 |
> |
|
| 704 |
> |
/* |
| 705 |
> |
* NOTE: You have to set type=regex; when using a regular expression |
| 706 |
> |
* based user entry |
| 707 |
> |
*/ |
| 708 |
|
type = regex; |
| 709 |
|
}; |
| 710 |
|
|
| 777 |
|
|
| 778 |
|
gecos { |
| 779 |
|
name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$"; |
| 780 |
+ |
|
| 781 |
+ |
/* |
| 782 |
+ |
* NOTE: You have to set type=regex; when using a regular expression |
| 783 |
+ |
* based name entry |
| 784 |
+ |
*/ |
| 785 |
|
type = regex; |
| 786 |
|
}; |
| 787 |
|
|
| 848 |
|
* knock_delay: The amount of time a user must wait between issuing |
| 849 |
|
* the knock command. |
| 850 |
|
*/ |
| 851 |
< |
knock_delay = 1 minutes; |
| 851 |
> |
knock_delay = 5 minutes; |
| 852 |
|
|
| 853 |
|
/* |
| 854 |
|
* knock_delay_channel: How often a knock to any specific channel |
| 902 |
|
*/ |
| 903 |
|
default_split_server_count = 10; |
| 904 |
|
|
| 905 |
< |
/* split no create: disallow users creating channels on split. */ |
| 905 |
> |
/* no_create_on_split: disallow users creating channels on split. */ |
| 906 |
|
no_create_on_split = yes; |
| 907 |
|
|
| 908 |
< |
/* split: no join: disallow users joining channels at all on a split */ |
| 908 |
> |
/* no_join_on_split: disallow users joining channels at all on a split. */ |
| 909 |
|
no_join_on_split = no; |
| 910 |
|
}; |
| 911 |
|
|
| 922 |
|
* may be a good idea. Except, it's useless |
| 923 |
|
* unless the entire net runs it. |
| 924 |
|
*/ |
| 925 |
< |
flatten_links = yes; |
| 925 |
> |
flatten_links = no; |
| 926 |
|
|
| 927 |
|
/* |
| 928 |
|
* links_delay: how often to update the links file when it is |
| 954 |
|
hidden_name = "*.hidden.com"; |
| 955 |
|
|
| 956 |
|
/* |
| 957 |
< |
* hide_server_ips: If this is disabled, opers will be unable to see servers |
| 958 |
< |
* ips and will be shown a masked ip, admins will be shown the real ip. |
| 959 |
< |
* |
| 960 |
< |
* If this is enabled, nobody can see a servers ip. *This is a kludge*, it |
| 961 |
< |
* has the side effect of hiding the ips everywhere, including logfiles. |
| 957 |
> |
* hide_server_ips: If this is disabled, opers will be unable to see |
| 958 |
> |
* servers ips and will be shown a masked ip, admins will be shown the |
| 959 |
> |
* real ip. |
| 960 |
> |
* |
| 961 |
> |
* If this is enabled, nobody can see a servers ip. *This is a kludge*, |
| 962 |
> |
* it has the side effect of hiding the ips everywhere, including |
| 963 |
> |
* logfiles. |
| 964 |
|
* |
| 965 |
|
* We recommend you leave this disabled, and just take care with who you |
| 966 |
|
* give admin=yes; to. |
| 973 |
|
* compiled in options in config.h. The general block is read at start time. |
| 974 |
|
*/ |
| 975 |
|
general { |
| 976 |
< |
/* max_watch: maximum WATCH entries */ |
| 976 |
> |
/* max_watch: maximum WATCH entries a client can have. */ |
| 977 |
|
max_watch = 64; |
| 978 |
|
|
| 979 |
|
/* |
| 1009 |
|
* automatically to switch for the current nick of that user. (seconds) |
| 1010 |
|
*/ |
| 1011 |
|
kill_chase_time_limit = 90; |
| 1012 |
< |
|
| 1012 |
> |
|
| 1013 |
|
/* |
| 1014 |
< |
* If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed |
| 1015 |
< |
* users in /trace etc. If this is defined they will be shown a masked IP. |
| 1014 |
> |
* If hide_spoof_ips is disabled, opers will be allowed to see the real |
| 1015 |
> |
* IP of spoofed users in /trace etc. If this is defined they will be |
| 1016 |
> |
* shown a masked IP. |
| 1017 |
|
*/ |
| 1018 |
|
hide_spoof_ips = yes; |
| 1019 |
|
|
| 1057 |
|
* dots_in_ident: the amount of '.' characters permitted in an ident |
| 1058 |
|
* reply before the user is rejected. |
| 1059 |
|
*/ |
| 1060 |
< |
dots_in_ident = 0; |
| 1060 |
> |
dots_in_ident = 2; |
| 1061 |
|
|
| 1062 |
|
/* |
| 1063 |
|
* dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts |
| 1240 |
|
* |
| 1241 |
|
* +b - bots - See bot and drone flooding notices |
| 1242 |
|
* +c - cconn - Client connection/quit notices |
| 1243 |
< |
* +C - cconn - Client connection/quit notices full |
| 1243 |
> |
* +C - cconn_full - Client connection/quit notices full |
| 1244 |
|
* +D - deaf - Don't receive channel messages |
| 1245 |
|
* +d - debug - See debugging notices |
| 1246 |
|
* +f - full - See I: line full notices |
| 1365 |
|
|
| 1366 |
|
modules { |
| 1367 |
|
/* |
| 1368 |
< |
* module path: other paths to search for modules specified below |
| 1368 |
> |
* path: other paths to search for modules specified below |
| 1369 |
|
* and in /modload. |
| 1370 |
|
*/ |
| 1371 |
< |
path = "/usr/local/ircd/modules"; |
| 1372 |
< |
path = "/usr/local/ircd/modules/autoload"; |
| 1371 |
> |
path = "@LIBDIR@/modules"; |
| 1372 |
> |
path = "@LIBDIR@/modules/autoload"; |
| 1373 |
|
|
| 1374 |
|
/* module: the name of a module to load on startup/rehash */ |
| 1375 |
|
#module = "some_module.so"; |