ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid-7.3/etc/example.efnet.conf
(Generate patch)

Comparing:
ircd-hybrid-7.2/etc/example.efnet.conf (file contents), Revision 876 by michael, Wed Oct 24 21:51:21 2007 UTC vs.
ircd-hybrid-7.3/etc/example.efnet.conf (file contents), Revision 1068 by michael, Tue Feb 16 23:01:26 2010 UTC

# Line 1 | Line 1
1   /* doc/example.efnet.conf - ircd-hybrid-7 EFnet Example configuration file
2 < * Copyright (C) 2000-2006 Hybrid Development Team
2 > * Copyright (C) 2000-2010 Hybrid Development Team
3   *
4   * Written by ejb, wcampbel, db, leeh and others
5   * Other example configurations can be found in the source dir under
# Line 74 | Line 74 | serverinfo {
74  
75          /*
76           * hub: allow this server to act as a hub and have multiple servers
77 <         * connected to it.  This may not be changed if there are active
78 <         * LazyLink servers.
77 >         * connected to it.
78           */
79          hub = no;
80  
81          /*
82           * vhost: the IP to bind to when we connect outward to ipv4 servers.
83 <         * This should be an ipv4 IP only, or "* for INADDR_ANY.
83 >         * This should be an ipv4 IP only, or "*" for INADDR_ANY.
84           */
85          #vhost = "192.169.0.1";
86  
87          /*
88           * vhost6: the IP to bind to when we connect outward to ipv6 servers.
89 <         * This should be an ipv6 IP only, or "* for INADDR_ANY.
89 >         * This should be an ipv6 IP only, or "*" for INADDR_ANY.
90           */
91          #vhost6 = "3ffe:80e8:546::2";
92  
# Line 95 | Line 94 | serverinfo {
94          max_clients = 512;
95  
96          /*
97 <         * rsa key: the path to the file containing our rsa key for cryptlink.
97 >         * rsa_private_key_file: the path to the file containing our
98 >         * rsa key for cryptlink.
99           *
100           * Example command to store a 2048 bit RSA keypair in
101           * rsa.key, and the public key in rsa.pub:
# Line 107 | Line 107 | serverinfo {
107           *      chmod 0644 rsa.pub
108           */
109          #rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
110 +
111 +        /*
112 +         * ssl_certificate_file: the path to the file containing our
113 +         * ssl certificate for encrypted client connection.
114 +         *
115 +         * This assumes your private RSA key is stored in rsa.key. You
116 +         * MUST have an RSA key in order to generate the certificate
117 +         *
118 +         *      openssl req -new -days 365 -x509 -key rsa.key -out cert.pem
119 +         *
120 +         * See http://www.openssl.org/docs/HOWTO/certificates.txt
121 +         *
122 +         * Please use the following values when generating the cert
123 +         *
124 +         *      Organization Name: Network Name
125 +         *      Organization Unit Name: changme.someirc.net
126 +         *      Common Name: irc.someirc.net
127 +         *      E-mail: you@domain.com
128 +         */
129 +        #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
130 +
131 +        /*
132 +         * ssl_server_protocol:
133 +         * SSL/TLS protocols we provide for incoming secure connections.
134 +         * This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
135 +         * SSLv2 is not suppported. This cannot be changed at runtime.
136 +         */
137 +        #ssl_server_protocol = sslv3, tlsv1;
138   };
139  
140   /*
# Line 260 | Line 288 | listen {
288          port = 6665 .. 6669;
289  
290          /*
291 <         * Listen on 192.168.0.1/7023 and hidden from STATS P
291 >         * Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P
292           * unless you are an administrator.
293           *
294           * NOTE: The "flags" directive has to come before "port".  Always!
295 +         *
296 +         * Currently available flags are:
297 +         *
298 +         *  ssl    - Port is for SSL client connections only
299 +         *  server - Only server connections are permitted
300 +         *  hidden - Port is hidden from /stats P
301           */
302 <        flags = hidden;
302 >        flags = hidden, ssl;
303          host = "192.168.0.1";
304 <        port = 7023;
304 >        port = 6697;
305  
306          /*
307           * host: set a specific IP/host the ports after the line will listen
# Line 427 | Line 461 | operator {
461           * kline:        allows KILL, KLINE and DLINE      (OLD 'K' flag)
462           * unkline:      allows UNKLINE and UNDLINE        (OLD 'U' flag)
463           * gline:        allows GLINE                      (OLD 'G' flag)
464 <         * xline:         allows XLINE                     (OLD 'X' flag)
464 >         * xline:        allows XLINE                      (OLD 'X' flag)
465           * operwall:     allows OPERWALL
466           * nick_changes: allows oper to see nickchanges    (OLD 'N' flag)
467           *               via usermode +n
# Line 514 | Line 548 | connect {
548           *              dependent on class limits.  By default, this is disabled.
549           * compressed:  controls whether traffic is compressed via ziplinks.
550           *              By default, this is disabled
517         * lazylink:    controls whether this server is a LazyLink.  LazyLink
518         *              servers may NOT hub.  See doc/LazyLinks.txt
519         *
520         *              EFnet Note:  With this enabled, you download a connect burst
521         *                           as it is needed, instead of all at once.  This
522         *                           could allow servers on much smaller lines (T1s)
523         *                           to link a server. It also could allow a server
524         *                           on a DoS'ed link to stay connected.
525         *                           This makes client servers
526         *                           cheaper to run.  EFnet needs more client servers.
527         *
551           * cryptlink:   enable full encryption for all data passing between our
552           *              server and this link and rsa authentication.
553           * burst_away:  This will send the /away string that users have set
# Line 534 | Line 557 | connect {
557           *              only if the server we are connecting to is capable
558           *              of TBURST/TB.
559           */
560 < #       flags = autoconn, lazylink, compressed, cryptlink, burst_away, topicburst;
560 > #       flags = autoconn, compressed, cryptlink, burst_away, topicburst;
561   };
562  
563   connect {
# Line 676 | Line 699 | kill {
699   };
700  
701   kill {
702 <        user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$";
702 >        user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$";
703 >
704 >        /*
705 >         * NOTE: You have to set type=regex; when using a regular expression
706 >         * based user entry
707 >         */
708          type = regex;
709   };
710  
# Line 749 | Line 777 | gecos {
777  
778   gecos {
779          name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$";
780 +
781 +        /*
782 +         * NOTE: You have to set type=regex; when using a regular expression
783 +         * based name entry
784 +         */
785          type = regex;
786   };
787  
# Line 815 | Line 848 | channel {
848           * knock_delay: The amount of time a user must wait between issuing
849           * the knock command.
850           */
851 <        knock_delay = 1 minutes;
851 >        knock_delay = 5 minutes;
852  
853          /*
854           * knock_delay_channel: How often a knock to any specific channel
# Line 869 | Line 902 | channel {
902           */
903          default_split_server_count = 10;
904  
905 <        /* split no create: disallow users creating channels on split. */
905 >        /* no_create_on_split: disallow users creating channels on split. */
906          no_create_on_split = yes;
907  
908 <        /* split: no join: disallow users joining channels at all on a split */
908 >        /* no_join_on_split: disallow users joining channels at all on a split. */
909          no_join_on_split = no;
910   };
911  
# Line 889 | Line 922 | serverhide {
922           *              may be a good idea.  Except, it's useless
923           *              unless the entire net runs it.
924           */
925 <        flatten_links = yes;
925 >        flatten_links = no;
926  
927          /*
928           * links_delay: how often to update the links file when it is
# Line 921 | Line 954 | serverhide {
954          hidden_name = "*.hidden.com";
955  
956          /*
957 <         * hide_server_ips: If this is disabled, opers will be unable to see servers
958 <         * ips and will be shown a masked ip, admins will be shown the real ip.
959 <         *
960 <         * If this is enabled, nobody can see a servers ip.  *This is a kludge*, it
961 <         * has the side effect of hiding the ips everywhere, including logfiles.
957 >         * hide_server_ips: If this is disabled, opers will be unable to see
958 >         * servers ips and will be shown a masked ip, admins will be shown the
959 >         * real ip.
960 >         *
961 >         * If this is enabled, nobody can see a servers ip. *This is a kludge*,
962 >         * it has the side effect of hiding the ips everywhere, including
963 >         * logfiles.
964           *
965           * We recommend you leave this disabled, and just take care with who you
966           * give admin=yes; to.
# Line 938 | Line 973 | serverhide {
973   * compiled in options in config.h.  The general block is read at start time.
974   */
975   general {
976 <        /* max_watch: maximum WATCH entries */
976 >        /* max_watch: maximum WATCH entries a client can have. */
977          max_watch = 64;
978  
979          /*
# Line 974 | Line 1009 | general {
1009           * automatically to switch for the current nick of that user. (seconds)
1010           */
1011          kill_chase_time_limit = 90;
1012 <
1012 >  
1013          /*
1014 <         * If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed
1015 <         * users in /trace etc.  If this is defined they will be shown a masked IP.
1014 >         * If hide_spoof_ips is disabled, opers will be allowed to see the real
1015 >         * IP of spoofed users in /trace etc. If this is defined they will be
1016 >         * shown a masked IP.
1017           */
1018          hide_spoof_ips = yes;
1019  
# Line 1021 | Line 1057 | general {
1057           * dots_in_ident: the amount of '.' characters permitted in an ident
1058           * reply before the user is rejected.
1059           */
1060 <        dots_in_ident = 0;
1060 >        dots_in_ident = 2;
1061  
1062          /*
1063           * dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts
# Line 1204 | Line 1240 | general {
1240           *
1241           * +b - bots         - See bot and drone flooding notices
1242           * +c - cconn        - Client connection/quit notices
1243 <         * +C - cconn        - Client connection/quit notices full
1243 >         * +C - cconn_full   - Client connection/quit notices full
1244           * +D - deaf         - Don't receive channel messages
1245           * +d - debug        - See debugging notices
1246           * +f - full         - See I: line full notices
# Line 1329 | Line 1365 | glines {
1365  
1366   modules {
1367          /*
1368 <         * module path: other paths to search for modules specified below
1368 >         * path: other paths to search for modules specified below
1369           * and in /modload.
1370           */
1371 <        path = "/usr/local/ircd/modules";
1372 <        path = "/usr/local/ircd/modules/autoload";
1371 >        path = "@LIBDIR@/modules";
1372 >        path = "@LIBDIR@/modules/autoload";
1373  
1374          /* module: the name of a module to load on startup/rehash */
1375          #module = "some_module.so";

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)