ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid-7.3/etc/example.efnet.conf
(Generate patch)

Comparing:
ircd-hybrid-7.2/etc/example.efnet.conf.in (file contents), Revision 902 by michael, Sun Nov 4 14:00:06 2007 UTC vs.
ircd-hybrid-7.3/etc/example.efnet.conf (file contents), Revision 1070 by michael, Tue Feb 16 23:40:20 2010 UTC

# Line 1 | Line 1
1   /* doc/example.efnet.conf - ircd-hybrid-7 EFnet Example configuration file
2 < * Copyright (C) 2000-2006 Hybrid Development Team
2 > * Copyright (C) 2000-2010 Hybrid Development Team
3   *
4   * Written by ejb, wcampbel, db, leeh and others
5   * Other example configurations can be found in the source dir under
# Line 47 | Line 47
47   */
48   serverinfo {
49          /*
50 <         * name: the name of our server.  This cannot be changed at runtime.
50 >         * name: the name of this server.  This cannot be changed at runtime.
51           */
52          name = "efnet.irc";
53  
# Line 80 | Line 80 | serverinfo {
80  
81          /*
82           * vhost: the IP to bind to when we connect outward to ipv4 servers.
83 <         * This should be an ipv4 IP only, or "* for INADDR_ANY.
83 >         * This should be an ipv4 IP only, or "*" for INADDR_ANY.
84           */
85          #vhost = "192.169.0.1";
86  
87          /*
88           * vhost6: the IP to bind to when we connect outward to ipv6 servers.
89 <         * This should be an ipv6 IP only, or "* for INADDR_ANY.
89 >         * This should be an ipv6 IP only, or "*" for INADDR_ANY.
90           */
91          #vhost6 = "3ffe:80e8:546::2";
92  
# Line 94 | Line 94 | serverinfo {
94          max_clients = 512;
95  
96          /*
97 <         * rsa key: the path to the file containing our rsa key for cryptlink.
97 >         * rsa_private_key_file: the path to the file containing our
98 >         * rsa key for cryptlink.
99           *
100           * Example command to store a 2048 bit RSA keypair in
101           * rsa.key, and the public key in rsa.pub:
# Line 106 | Line 107 | serverinfo {
107           *      chmod 0644 rsa.pub
108           */
109          #rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
110 +
111 +        /*
112 +         * ssl_certificate_file: the path to the file containing our
113 +         * ssl certificate for encrypted client connection.
114 +         *
115 +         * This assumes your private RSA key is stored in rsa.key. You
116 +         * MUST have an RSA key in order to generate the certificate
117 +         *
118 +         *      openssl req -new -days 365 -x509 -key rsa.key -out cert.pem
119 +         *
120 +         * See http://www.openssl.org/docs/HOWTO/certificates.txt
121 +         *
122 +         * Please use the following values when generating the cert
123 +         *
124 +         *      Organization Name: Network Name
125 +         *      Organization Unit Name: changme.someirc.net
126 +         *      Common Name: irc.someirc.net
127 +         *      E-mail: you@domain.com
128 +         */
129 +        #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
130 +
131 +        /*
132 +         * ssl_server_protocol:
133 +         * SSL/TLS protocols we provide for incoming secure connections.
134 +         * This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
135 +         * SSLv2 is not suppported. This cannot be changed at runtime.
136 +         */
137 +        #ssl_server_protocol = sslv3, tlsv1;
138   };
139  
140   /*
# Line 259 | Line 288 | listen {
288          port = 6665 .. 6669;
289  
290          /*
291 <         * Listen on 192.168.0.1/7023 and hidden from STATS P
291 >         * Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P
292           * unless you are an administrator.
293           *
294           * NOTE: The "flags" directive has to come before "port".  Always!
# Line 270 | Line 299 | listen {
299           *  server - Only server connections are permitted
300           *  hidden - Port is hidden from /stats P
301           */
302 <        flags = hidden;
302 >        flags = hidden, ssl;
303          host = "192.168.0.1";
304 <        port = 7023;
304 >        port = 6697;
305  
306          /*
307           * host: set a specific IP/host the ports after the line will listen
# Line 373 | Line 402 | operator {
402  
403          /*
404           * password: the password required to oper.  By default this will
405 <         * need to be encrypted using 'mkpasswd'.  MD5 is supported.
405 >         * need to be encrypted by using the provided mkpasswd tool.
406 >         * Several password hash algorithms are available depending
407 >         * on your system's crypt() implementation. For example, a modern
408 >         * glibc already has support for SHA-256/512, and MD5 encryption
409 >         * algorithms.
410           */
411 <        password = "etcnjl8juSU1E";
411 >        password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4";
412  
413          /*
414           * encrypted: controls whether the oper password above has been
415 <         * encrypted.  (OLD CRYPT_OPER_PASSWORD now optional per operator)
415 >         * encrypted.
416           */
417          encrypted = yes;
418  
# Line 432 | Line 465 | operator {
465           * kline:        allows KILL, KLINE and DLINE      (OLD 'K' flag)
466           * unkline:      allows UNKLINE and UNDLINE        (OLD 'U' flag)
467           * gline:        allows GLINE                      (OLD 'G' flag)
468 <         * xline:         allows XLINE                     (OLD 'X' flag)
468 >         * xline:        allows XLINE                      (OLD 'X' flag)
469           * operwall:     allows OPERWALL
470           * nick_changes: allows oper to see nickchanges    (OLD 'N' flag)
471           *               via usermode +n
# Line 489 | Line 522 | connect {
522  
523          /*
524           * encrypted: controls whether the accept_password above has been
525 <         * encrypted.  (OLD CRYPT_LINK_PASSWORD now optional per connect)
525 >         * encrypted.
526           */
527          encrypted = no;
528  
# Line 670 | Line 703 | kill {
703   };
704  
705   kill {
706 <        user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$";
706 >        user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$";
707 >
708 >        /*
709 >         * NOTE: You have to set type=regex; when using a regular expression
710 >         * based user entry
711 >         */
712          type = regex;
713   };
714  
# Line 743 | Line 781 | gecos {
781  
782   gecos {
783          name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$";
784 +
785 +        /*
786 +         * NOTE: You have to set type=regex; when using a regular expression
787 +         * based name entry
788 +         */
789          type = regex;
790   };
791  
# Line 809 | Line 852 | channel {
852           * knock_delay: The amount of time a user must wait between issuing
853           * the knock command.
854           */
855 <        knock_delay = 1 minutes;
855 >        knock_delay = 5 minutes;
856  
857          /*
858           * knock_delay_channel: How often a knock to any specific channel
# Line 855 | Line 898 | channel {
898           * default_split_user_count: when the usercount is lower than this level,
899           * consider ourselves split.  This must be set for automatic splitmode.
900           */
901 <        default_split_user_count = 40000;
901 >        default_split_user_count = 20000;
902  
903          /*
904           * default_split_server_count: when the servercount is lower than this,
# Line 863 | Line 906 | channel {
906           */
907          default_split_server_count = 10;
908  
909 <        /* split no create: disallow users creating channels on split. */
909 >        /* no_create_on_split: disallow users creating channels on split. */
910          no_create_on_split = yes;
911  
912 <        /* split: no join: disallow users joining channels at all on a split */
912 >        /* no_join_on_split: disallow users joining channels at all on a split. */
913          no_join_on_split = no;
914   };
915  
# Line 883 | Line 926 | serverhide {
926           *              may be a good idea.  Except, it's useless
927           *              unless the entire net runs it.
928           */
929 <        flatten_links = yes;
929 >        flatten_links = no;
930  
931          /*
932           * links_delay: how often to update the links file when it is
# Line 915 | Line 958 | serverhide {
958          hidden_name = "*.hidden.com";
959  
960          /*
961 <         * hide_server_ips: If this is disabled, opers will be unable to see servers
962 <         * ips and will be shown a masked ip, admins will be shown the real ip.
963 <         *
964 <         * If this is enabled, nobody can see a servers ip.  *This is a kludge*, it
965 <         * has the side effect of hiding the ips everywhere, including logfiles.
961 >         * hide_server_ips: If this is disabled, opers will be unable to see
962 >         * servers ips and will be shown a masked ip, admins will be shown the
963 >         * real ip.
964 >         *
965 >         * If this is enabled, nobody can see a servers ip. *This is a kludge*,
966 >         * it has the side effect of hiding the ips everywhere, including
967 >         * logfiles.
968           *
969           * We recommend you leave this disabled, and just take care with who you
970           * give admin=yes; to.
# Line 932 | Line 977 | serverhide {
977   * compiled in options in config.h.  The general block is read at start time.
978   */
979   general {
980 <        /* max_watch: maximum WATCH entries */
981 <        max_watch = 64;
980 >        /* max_watch: maximum WATCH entries a client can have. */
981 >        max_watch = 60;
982  
983          /*
984           * gline_min_cidr: the minimum required length of a CIDR bitmask
# Line 968 | Line 1013 | general {
1013           * automatically to switch for the current nick of that user. (seconds)
1014           */
1015          kill_chase_time_limit = 90;
1016 <
1016 >  
1017          /*
1018 <         * If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed
1019 <         * users in /trace etc.  If this is defined they will be shown a masked IP.
1018 >         * If hide_spoof_ips is disabled, opers will be allowed to see the real
1019 >         * IP of spoofed users in /trace etc. If this is defined they will be
1020 >         * shown a masked IP.
1021           */
1022          hide_spoof_ips = yes;
1023  
# Line 1015 | Line 1061 | general {
1061           * dots_in_ident: the amount of '.' characters permitted in an ident
1062           * reply before the user is rejected.
1063           */
1064 <        dots_in_ident = 0;
1064 >        dots_in_ident = 2;
1065  
1066          /*
1067           * dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts
# Line 1198 | Line 1244 | general {
1244           *
1245           * +b - bots         - See bot and drone flooding notices
1246           * +c - cconn        - Client connection/quit notices
1247 <         * +C - cconn        - Client connection/quit notices full
1247 >         * +C - cconn_full   - Client connection/quit notices full
1248           * +D - deaf         - Don't receive channel messages
1249           * +d - debug        - See debugging notices
1250           * +f - full         - See I: line full notices
# Line 1323 | Line 1369 | glines {
1369  
1370   modules {
1371          /*
1372 <         * module path: other paths to search for modules specified below
1372 >         * path: other paths to search for modules specified below
1373           * and in /modload.
1374           */
1375 <        path = "@datadir@/modules";
1376 <        path = "@datadir@/autoload";
1375 >        path = "/usr/local/ircd/lib/ircd-hybrid/modules";
1376 >        path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
1377  
1378          /* module: the name of a module to load on startup/rehash */
1379 <        #module = "some_module.so";
1379 >        #module = "some_module.la";
1380   };

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)