| 1 |
|
/* doc/example.efnet.conf - ircd-hybrid-7 EFnet Example configuration file |
| 2 |
< |
* Copyright (C) 2000-2006 Hybrid Development Team |
| 2 |
> |
* Copyright (C) 2000-2010 Hybrid Development Team |
| 3 |
|
* |
| 4 |
|
* Written by ejb, wcampbel, db, leeh and others |
| 5 |
|
* Other example configurations can be found in the source dir under |
| 47 |
|
*/ |
| 48 |
|
serverinfo { |
| 49 |
|
/* |
| 50 |
< |
* name: the name of our server. This cannot be changed at runtime. |
| 50 |
> |
* name: the name of this server. This cannot be changed at runtime. |
| 51 |
|
*/ |
| 52 |
|
name = "efnet.irc"; |
| 53 |
|
|
| 80 |
|
|
| 81 |
|
/* |
| 82 |
|
* vhost: the IP to bind to when we connect outward to ipv4 servers. |
| 83 |
< |
* This should be an ipv4 IP only, or "* for INADDR_ANY. |
| 83 |
> |
* This should be an ipv4 IP only, or "*" for INADDR_ANY. |
| 84 |
|
*/ |
| 85 |
|
#vhost = "192.169.0.1"; |
| 86 |
|
|
| 87 |
|
/* |
| 88 |
|
* vhost6: the IP to bind to when we connect outward to ipv6 servers. |
| 89 |
< |
* This should be an ipv6 IP only, or "* for INADDR_ANY. |
| 89 |
> |
* This should be an ipv6 IP only, or "*" for INADDR_ANY. |
| 90 |
|
*/ |
| 91 |
|
#vhost6 = "3ffe:80e8:546::2"; |
| 92 |
|
|
| 94 |
|
max_clients = 512; |
| 95 |
|
|
| 96 |
|
/* |
| 97 |
< |
* rsa key: the path to the file containing our rsa key for cryptlink. |
| 97 |
> |
* rsa_private_key_file: the path to the file containing our |
| 98 |
> |
* rsa key for cryptlink. |
| 99 |
|
* |
| 100 |
|
* Example command to store a 2048 bit RSA keypair in |
| 101 |
|
* rsa.key, and the public key in rsa.pub: |
| 107 |
|
* chmod 0644 rsa.pub |
| 108 |
|
*/ |
| 109 |
|
#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key"; |
| 110 |
+ |
|
| 111 |
+ |
/* |
| 112 |
+ |
* ssl_certificate_file: the path to the file containing our |
| 113 |
+ |
* ssl certificate for encrypted client connection. |
| 114 |
+ |
* |
| 115 |
+ |
* This assumes your private RSA key is stored in rsa.key. You |
| 116 |
+ |
* MUST have an RSA key in order to generate the certificate |
| 117 |
+ |
* |
| 118 |
+ |
* openssl req -new -days 365 -x509 -key rsa.key -out cert.pem |
| 119 |
+ |
* |
| 120 |
+ |
* See http://www.openssl.org/docs/HOWTO/certificates.txt |
| 121 |
+ |
* |
| 122 |
+ |
* Please use the following values when generating the cert |
| 123 |
+ |
* |
| 124 |
+ |
* Organization Name: Network Name |
| 125 |
+ |
* Organization Unit Name: changme.someirc.net |
| 126 |
+ |
* Common Name: irc.someirc.net |
| 127 |
+ |
* E-mail: you@domain.com |
| 128 |
+ |
*/ |
| 129 |
+ |
#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem"; |
| 130 |
+ |
|
| 131 |
+ |
/* |
| 132 |
+ |
* ssl_server_protocol: |
| 133 |
+ |
* SSL/TLS protocols we provide for incoming secure connections. |
| 134 |
+ |
* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1. |
| 135 |
+ |
* SSLv2 is not suppported. This cannot be changed at runtime. |
| 136 |
+ |
*/ |
| 137 |
+ |
#ssl_server_protocol = sslv3, tlsv1; |
| 138 |
|
}; |
| 139 |
|
|
| 140 |
|
/* |
| 288 |
|
port = 6665 .. 6669; |
| 289 |
|
|
| 290 |
|
/* |
| 291 |
< |
* Listen on 192.168.0.1/7023 and hidden from STATS P |
| 291 |
> |
* Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P |
| 292 |
|
* unless you are an administrator. |
| 293 |
|
* |
| 294 |
|
* NOTE: The "flags" directive has to come before "port". Always! |
| 299 |
|
* server - Only server connections are permitted |
| 300 |
|
* hidden - Port is hidden from /stats P |
| 301 |
|
*/ |
| 302 |
< |
flags = hidden; |
| 302 |
> |
flags = hidden, ssl; |
| 303 |
|
host = "192.168.0.1"; |
| 304 |
< |
port = 7023; |
| 304 |
> |
port = 6697; |
| 305 |
|
|
| 306 |
|
/* |
| 307 |
|
* host: set a specific IP/host the ports after the line will listen |
| 402 |
|
|
| 403 |
|
/* |
| 404 |
|
* password: the password required to oper. By default this will |
| 405 |
< |
* need to be encrypted using 'mkpasswd'. MD5 is supported. |
| 405 |
> |
* need to be encrypted by using the provided mkpasswd tool. |
| 406 |
> |
* Several password hash algorithms are available depending |
| 407 |
> |
* on your system's crypt() implementation. For example, a modern |
| 408 |
> |
* glibc already has support for SHA-256/512, and MD5 encryption |
| 409 |
> |
* algorithms. |
| 410 |
|
*/ |
| 411 |
< |
password = "etcnjl8juSU1E"; |
| 411 |
> |
password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4"; |
| 412 |
|
|
| 413 |
|
/* |
| 414 |
|
* encrypted: controls whether the oper password above has been |
| 415 |
< |
* encrypted. (OLD CRYPT_OPER_PASSWORD now optional per operator) |
| 415 |
> |
* encrypted. |
| 416 |
|
*/ |
| 417 |
|
encrypted = yes; |
| 418 |
|
|
| 465 |
|
* kline: allows KILL, KLINE and DLINE (OLD 'K' flag) |
| 466 |
|
* unkline: allows UNKLINE and UNDLINE (OLD 'U' flag) |
| 467 |
|
* gline: allows GLINE (OLD 'G' flag) |
| 468 |
< |
* xline: allows XLINE (OLD 'X' flag) |
| 468 |
> |
* xline: allows XLINE (OLD 'X' flag) |
| 469 |
|
* operwall: allows OPERWALL |
| 470 |
|
* nick_changes: allows oper to see nickchanges (OLD 'N' flag) |
| 471 |
|
* via usermode +n |
| 522 |
|
|
| 523 |
|
/* |
| 524 |
|
* encrypted: controls whether the accept_password above has been |
| 525 |
< |
* encrypted. (OLD CRYPT_LINK_PASSWORD now optional per connect) |
| 525 |
> |
* encrypted. |
| 526 |
|
*/ |
| 527 |
|
encrypted = no; |
| 528 |
|
|
| 703 |
|
}; |
| 704 |
|
|
| 705 |
|
kill { |
| 706 |
< |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$"; |
| 706 |
> |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$"; |
| 707 |
> |
|
| 708 |
> |
/* |
| 709 |
> |
* NOTE: You have to set type=regex; when using a regular expression |
| 710 |
> |
* based user entry |
| 711 |
> |
*/ |
| 712 |
|
type = regex; |
| 713 |
|
}; |
| 714 |
|
|
| 781 |
|
|
| 782 |
|
gecos { |
| 783 |
|
name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$"; |
| 784 |
+ |
|
| 785 |
+ |
/* |
| 786 |
+ |
* NOTE: You have to set type=regex; when using a regular expression |
| 787 |
+ |
* based name entry |
| 788 |
+ |
*/ |
| 789 |
|
type = regex; |
| 790 |
|
}; |
| 791 |
|
|
| 852 |
|
* knock_delay: The amount of time a user must wait between issuing |
| 853 |
|
* the knock command. |
| 854 |
|
*/ |
| 855 |
< |
knock_delay = 1 minutes; |
| 855 |
> |
knock_delay = 5 minutes; |
| 856 |
|
|
| 857 |
|
/* |
| 858 |
|
* knock_delay_channel: How often a knock to any specific channel |
| 898 |
|
* default_split_user_count: when the usercount is lower than this level, |
| 899 |
|
* consider ourselves split. This must be set for automatic splitmode. |
| 900 |
|
*/ |
| 901 |
< |
default_split_user_count = 40000; |
| 901 |
> |
default_split_user_count = 20000; |
| 902 |
|
|
| 903 |
|
/* |
| 904 |
|
* default_split_server_count: when the servercount is lower than this, |
| 906 |
|
*/ |
| 907 |
|
default_split_server_count = 10; |
| 908 |
|
|
| 909 |
< |
/* split no create: disallow users creating channels on split. */ |
| 909 |
> |
/* no_create_on_split: disallow users creating channels on split. */ |
| 910 |
|
no_create_on_split = yes; |
| 911 |
|
|
| 912 |
< |
/* split: no join: disallow users joining channels at all on a split */ |
| 912 |
> |
/* no_join_on_split: disallow users joining channels at all on a split. */ |
| 913 |
|
no_join_on_split = no; |
| 914 |
|
}; |
| 915 |
|
|
| 926 |
|
* may be a good idea. Except, it's useless |
| 927 |
|
* unless the entire net runs it. |
| 928 |
|
*/ |
| 929 |
< |
flatten_links = yes; |
| 929 |
> |
flatten_links = no; |
| 930 |
|
|
| 931 |
|
/* |
| 932 |
|
* links_delay: how often to update the links file when it is |
| 958 |
|
hidden_name = "*.hidden.com"; |
| 959 |
|
|
| 960 |
|
/* |
| 961 |
< |
* hide_server_ips: If this is disabled, opers will be unable to see servers |
| 962 |
< |
* ips and will be shown a masked ip, admins will be shown the real ip. |
| 963 |
< |
* |
| 964 |
< |
* If this is enabled, nobody can see a servers ip. *This is a kludge*, it |
| 965 |
< |
* has the side effect of hiding the ips everywhere, including logfiles. |
| 961 |
> |
* hide_server_ips: If this is disabled, opers will be unable to see |
| 962 |
> |
* servers ips and will be shown a masked ip, admins will be shown the |
| 963 |
> |
* real ip. |
| 964 |
> |
* |
| 965 |
> |
* If this is enabled, nobody can see a servers ip. *This is a kludge*, |
| 966 |
> |
* it has the side effect of hiding the ips everywhere, including |
| 967 |
> |
* logfiles. |
| 968 |
|
* |
| 969 |
|
* We recommend you leave this disabled, and just take care with who you |
| 970 |
|
* give admin=yes; to. |
| 977 |
|
* compiled in options in config.h. The general block is read at start time. |
| 978 |
|
*/ |
| 979 |
|
general { |
| 980 |
< |
/* max_watch: maximum WATCH entries */ |
| 981 |
< |
max_watch = 64; |
| 980 |
> |
/* max_watch: maximum WATCH entries a client can have. */ |
| 981 |
> |
max_watch = 60; |
| 982 |
|
|
| 983 |
|
/* |
| 984 |
|
* gline_min_cidr: the minimum required length of a CIDR bitmask |
| 1013 |
|
* automatically to switch for the current nick of that user. (seconds) |
| 1014 |
|
*/ |
| 1015 |
|
kill_chase_time_limit = 90; |
| 1016 |
< |
|
| 1016 |
> |
|
| 1017 |
|
/* |
| 1018 |
< |
* If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed |
| 1019 |
< |
* users in /trace etc. If this is defined they will be shown a masked IP. |
| 1018 |
> |
* If hide_spoof_ips is disabled, opers will be allowed to see the real |
| 1019 |
> |
* IP of spoofed users in /trace etc. If this is defined they will be |
| 1020 |
> |
* shown a masked IP. |
| 1021 |
|
*/ |
| 1022 |
|
hide_spoof_ips = yes; |
| 1023 |
|
|
| 1061 |
|
* dots_in_ident: the amount of '.' characters permitted in an ident |
| 1062 |
|
* reply before the user is rejected. |
| 1063 |
|
*/ |
| 1064 |
< |
dots_in_ident = 0; |
| 1064 |
> |
dots_in_ident = 2; |
| 1065 |
|
|
| 1066 |
|
/* |
| 1067 |
|
* dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts |
| 1244 |
|
* |
| 1245 |
|
* +b - bots - See bot and drone flooding notices |
| 1246 |
|
* +c - cconn - Client connection/quit notices |
| 1247 |
< |
* +C - cconn - Client connection/quit notices full |
| 1247 |
> |
* +C - cconn_full - Client connection/quit notices full |
| 1248 |
|
* +D - deaf - Don't receive channel messages |
| 1249 |
|
* +d - debug - See debugging notices |
| 1250 |
|
* +f - full - See I: line full notices |
| 1369 |
|
|
| 1370 |
|
modules { |
| 1371 |
|
/* |
| 1372 |
< |
* module path: other paths to search for modules specified below |
| 1372 |
> |
* path: other paths to search for modules specified below |
| 1373 |
|
* and in /modload. |
| 1374 |
|
*/ |
| 1375 |
< |
path = "@datadir@/modules"; |
| 1376 |
< |
path = "@datadir@/autoload"; |
| 1375 |
> |
path = "/usr/local/ircd/lib/ircd-hybrid/modules"; |
| 1376 |
> |
path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload"; |
| 1377 |
|
|
| 1378 |
|
/* module: the name of a module to load on startup/rehash */ |
| 1379 |
< |
#module = "some_module.so"; |
| 1379 |
> |
#module = "some_module.la"; |
| 1380 |
|
}; |