ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid-7.3/etc/example.efnet.conf

Comparing:
ircd-hybrid-7.2/etc/example.efnet.conf.in (file contents), Revision 902 by michael, Sun Nov 4 14:00:06 2007 UTC vs.
ircd-hybrid-7.3/etc/example.efnet.conf (file contents), Revision 1284 by michael, Sun Feb 5 13:40:36 2012 UTC

#	Line 1 | Line 1
1		/* doc/example.efnet.conf - ircd-hybrid-7 EFnet Example configuration file
2	<	* Copyright (C) 2000-2006 Hybrid Development Team
2	>	* Copyright (C) 2000-2011 Hybrid Development Team
3		*
4		* Written by ejb, wcampbel, db, leeh and others
5		* Other example configurations can be found in the source dir under
#	Line 47 | Line 47
47		*/
48		serverinfo {
49		/*
50	<	* name: the name of our server.  This cannot be changed at runtime.
50	>	* name: the name of this server.  This cannot be changed at runtime.
51		*/
52		name = "efnet.irc";
53
#	Line 80 | Line 80 | serverinfo {
80
81		/*
82		* vhost: the IP to bind to when we connect outward to ipv4 servers.
83	<	* This should be an ipv4 IP only, or "* for INADDR_ANY.
83	>	* This should be an ipv4 IP only, or "*" for INADDR_ANY.
84		*/
85		#vhost = "192.169.0.1";
86
87		/*
88		* vhost6: the IP to bind to when we connect outward to ipv6 servers.
89	<	* This should be an ipv6 IP only, or "* for INADDR_ANY.
89	>	* This should be an ipv6 IP only, or "*" for INADDR_ANY.
90		*/
91		#vhost6 = "3ffe:80e8:546::2";
92
#	Line 94 | Line 94 | serverinfo {
94		max_clients = 512;
95
96		/*
97	<	* rsa key: the path to the file containing our rsa key for cryptlink.
97	>	* rsa_private_key_file: the path to the file containing our
98	>	* rsa key for cryptlink.
99		*
100		* Example command to store a 2048 bit RSA keypair in
101		* rsa.key, and the public key in rsa.pub:
#	Line 106 | Line 107 | serverinfo {
107		*      chmod 0644 rsa.pub
108		*/
109		#rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
110	+
111	+	/*
112	+	* ssl_certificate_file: the path to the file containing our
113	+	* ssl certificate for encrypted client connection.
114	+	*
115	+	* This assumes your private RSA key is stored in rsa.key. You
116	+	* MUST have an RSA key in order to generate the certificate
117	+	*
118	+	*      openssl req -new -days 365 -x509 -key rsa.key -out cert.pem
119	+	*
120	+	* See http://www.openssl.org/docs/HOWTO/certificates.txt
121	+	*
122	+	* Please use the following values when generating the cert
123	+	*
124	+	*      Organization Name: Network Name
125	+	*      Organization Unit Name: changme.someirc.net
126	+	*      Common Name: irc.someirc.net
127	+	*      E-mail: you@domain.com
128	+	*/
129	+	#ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
130	+
131	+	/*
132	+	* ssl_server_protocol:
133	+	* SSL/TLS protocols we provide for incoming secure connections.
134	+	* This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
135	+	* SSLv2 is not suppported. This cannot be changed at runtime.
136	+	*/
137	+	#ssl_server_protocol = sslv3, tlsv1;
138		};
139
140		/*
#	Line 259 | Line 288 | listen {
288		port = 6665 .. 6669;
289
290		/*
291	<	* Listen on 192.168.0.1/7023 and hidden from STATS P
291	>	* Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P
292		* unless you are an administrator.
293		*
294		* NOTE: The "flags" directive has to come before "port".  Always!
#	Line 270 | Line 299 | listen {
299		*  server - Only server connections are permitted
300		*  hidden - Port is hidden from /stats P
301		*/
302	<	flags = hidden;
302	>	flags = hidden, ssl;
303		host = "192.168.0.1";
304	<	port = 7023;
304	>	port = 6697;
305
306		/*
307		* host: set a specific IP/host the ports after the line will listen
#	Line 319 | Line 348 | auth {
348		*                password to connect using another auth{} block
349		*                ('&' prefix on /stats I if disabled)
350		* need_ident:    require the user to have identd to connect ('+' prefix on /stats I)
351	+	* need_tls:      require the user to have a SSL/TLS connection ('#' prefix on /stats I)
352		* spoof_notice:  enable spoofing notification to admins
353		* exceed_limit:  allow a user to exceed class limits ('>' prefix on /stats I)
354		* kline_exempt:  exempt this user from k/glines ('^' prefix on /stats I)
#	Line 365 | Line 395 | operator {
395		name = "god";
396
397		/*
398	<	* user: the user@host required for this operator.  CIDR is not
399	<	* supported.  Multiple user="" lines are supported.
398	>	* user: the user@host required for this operator. Multiple
399	>	* user="" lines are supported.
400		*/
401	<	user = "*god@*";
402	<	user = "*@127.0.0.1";
401	>	user = "*god@192.168.0.0/16";
402	>	user = "*@127.0.0.0/8";
403
404		/*
405		* password: the password required to oper.  By default this will
406	<	* need to be encrypted using 'mkpasswd'.  MD5 is supported.
406	>	* need to be encrypted by using the provided mkpasswd tool.
407	>	* Several password hash algorithms are available depending
408	>	* on your system's crypt() implementation. For example, a modern
409	>	* glibc already has support for SHA-256/512, and MD5 encryption
410	>	* algorithms.
411		*/
412	<	password = "etcnjl8juSU1E";
412	>	password = "$5$x5zof8qe.Yc7/bPp$5zIg1Le2Lsgd4CvOjaD20pr5PmcfD7ha/9b2.TaUyG4";
413
414		/*
415		* encrypted: controls whether the oper password above has been
416	<	* encrypted.  (OLD CRYPT_OPER_PASSWORD now optional per operator)
416	>	* encrypted.
417		*/
418		encrypted = yes;
419
#	Line 432 | Line 466 | operator {
466		* kline:        allows KILL, KLINE and DLINE      (OLD 'K' flag)
467		* unkline:      allows UNKLINE and UNDLINE        (OLD 'U' flag)
468		* gline:        allows GLINE                      (OLD 'G' flag)
469	<	* xline:         allows XLINE                     (OLD 'X' flag)
469	>	* xline:        allows XLINE                      (OLD 'X' flag)
470		* operwall:     allows OPERWALL
471		* nick_changes: allows oper to see nickchanges    (OLD 'N' flag)
472		*               via usermode +n
#	Line 444 | Line 478 | operator {
478		* hidden_admin: same as 'admin', but noone can recognize you as
479		*               being an admin
480		* hidden_oper:  not shown in /stats p (except for other operators)
447	–	*/
448	–	/* You can either use
449	–	* die = yes;
450	–	* rehash = yes;
451	–	*
452	–	* or in a flags statement i.e.
453	–	* flags = die, rehash;
481		*
482	<	* You can also negate a flag with ~ i.e.
482	>	* A flag can be negated with ~ i.e.
483		* flags = ~remote;
457	–	*
484		*/
485		flags = global_kill, remote, kline, unkline, xline,
486		die, rehash, nick_changes, admin, operwall;
#	Line 489 | Line 515 | connect {
515
516		/*
517		* encrypted: controls whether the accept_password above has been
518	<	* encrypted.  (OLD CRYPT_LINK_PASSWORD now optional per connect)
518	>	* encrypted.
519		*/
520		encrypted = no;
521
#	Line 508 | Line 534 | connect {
534		*/
535		#       leaf_mask = "*.uk";
536
511	–	/* fakename: the servername we pretend to be when we connect */
512	–	#       fakename = "*.arpa";
513	–
537		/* class: the class this server is in */
538		class = "server";
539
#	Line 670 | Line 693 | kill {
693		};
694
695		kill {
696	<	user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.org$";
696	>	user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$";
697	>
698	>	/*
699	>	* NOTE: You have to set type=regex; when using a regular expression
700	>	* based user entry
701	>	*/
702		type = regex;
703		};
704
#	Line 743 | Line 771 | gecos {
771
772		gecos {
773		name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$";
774	+
775	+	/*
776	+	* NOTE: You have to set type=regex; when using a regular expression
777	+	* based name entry
778	+	*/
779		type = regex;
780		};
781
#	Line 809 | Line 842 | channel {
842		* knock_delay: The amount of time a user must wait between issuing
843		* the knock command.
844		*/
845	<	knock_delay = 1 minutes;
845	>	knock_delay = 5 minutes;
846
847		/*
848		* knock_delay_channel: How often a knock to any specific channel
#	Line 855 | Line 888 | channel {
888		* default_split_user_count: when the usercount is lower than this level,
889		* consider ourselves split.  This must be set for automatic splitmode.
890		*/
891	<	default_split_user_count = 40000;
891	>	default_split_user_count = 20000;
892
893		/*
894		* default_split_server_count: when the servercount is lower than this,
#	Line 863 | Line 896 | channel {
896		*/
897		default_split_server_count = 10;
898
899	<	/* split no create: disallow users creating channels on split. */
899	>	/* no_create_on_split: disallow users creating channels on split. */
900		no_create_on_split = yes;
901
902	<	/* split: no join: disallow users joining channels at all on a split */
902	>	/* no_join_on_split: disallow users joining channels at all on a split. */
903		no_join_on_split = no;
904		};
905
#	Line 883 | Line 916 | serverhide {
916		*              may be a good idea.  Except, it's useless
917		*              unless the entire net runs it.
918		*/
919	<	flatten_links = yes;
919	>	flatten_links = no;
920
921		/*
922		* links_delay: how often to update the links file when it is
#	Line 915 | Line 948 | serverhide {
948		hidden_name = "*.hidden.com";
949
950		/*
951	<	* hide_server_ips: If this is disabled, opers will be unable to see servers
952	<	* ips and will be shown a masked ip, admins will be shown the real ip.
953	<	*
954	<	* If this is enabled, nobody can see a servers ip.  *This is a kludge*, it
955	<	* has the side effect of hiding the ips everywhere, including logfiles.
951	>	* hide_server_ips: If this is disabled, opers will be unable to see
952	>	* servers ips and will be shown a masked ip, admins will be shown the
953	>	* real ip.
954	>	*
955	>	* If this is enabled, nobody can see a servers ip. *This is a kludge*,
956	>	* it has the side effect of hiding the ips everywhere, including
957	>	* logfiles.
958		*
959		* We recommend you leave this disabled, and just take care with who you
960		* give admin=yes; to.
#	Line 932 | Line 967 | serverhide {
967		* compiled in options in config.h.  The general block is read at start time.
968		*/
969		general {
970	<	/* max_watch: maximum WATCH entries */
971	<	max_watch = 64;
970	>	/* max_watch: maximum WATCH entries a client can have. */
971	>	max_watch = 60;
972
973		/*
974		* gline_min_cidr: the minimum required length of a CIDR bitmask
#	Line 965 | Line 1000 | general {
1000
1001		/*
1002		* Max time from the nickname change that still causes KILL
1003	<	* automatically to switch for the current nick of that user. (seconds)
1003	>	* automatically to switch for the current nick of that user.
1004		*/
1005	<	kill_chase_time_limit = 90;
1006	<
1005	>	kill_chase_time_limit = 90 seconds;
1006	>
1007		/*
1008	<	* If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed
1009	<	* users in /trace etc.  If this is defined they will be shown a masked IP.
1008	>	* If hide_spoof_ips is disabled, opers will be allowed to see the real
1009	>	* IP of spoofed users in /trace etc. If this is defined they will be
1010	>	* shown a masked IP.
1011		*/
1012		hide_spoof_ips = yes;
1013
#	Line 1015 | Line 1051 | general {
1051		* dots_in_ident: the amount of '.' characters permitted in an ident
1052		* reply before the user is rejected.
1053		*/
1054	<	dots_in_ident = 0;
1019	<
1020	<	/*
1021	<	* dot_in_ip6_addr: ircd-hybrid-6.0 and earlier will disallow hosts
1022	<	* without a '.' in them.  This will add one to the end.  Only needed
1023	<	* for older servers.
1024	<	*/
1025	<	dot_in_ip6_addr = no;
1054	>	dots_in_ident = 2;
1055
1056		/*
1057		* min_nonwildcard: the minimum non wildcard characters in k/d/g lines
#	Line 1198 | Line 1227 | general {
1227		*
1228		* +b - bots         - See bot and drone flooding notices
1229		* +c - cconn        - Client connection/quit notices
1230	<	* +C - cconn        - Client connection/quit notices full
1230	>	* +C - cconn_full   - Client connection/quit notices full
1231		* +D - deaf         - Don't receive channel messages
1232		* +d - debug        - See debugging notices
1233		* +f - full         - See I: line full notices
#	Line 1323 | Line 1352 | glines {
1352
1353		modules {
1354		/*
1355	<	* module path: other paths to search for modules specified below
1355	>	* path: other paths to search for modules specified below
1356		* and in /modload.
1357		*/
1358	<	path = "@datadir@/modules";
1359	<	path = "@datadir@/autoload";
1358	>	path = "/usr/local/ircd/lib/ircd-hybrid/modules";
1359	>	path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
1360
1361		/* module: the name of a module to load on startup/rehash */
1362	<	#module = "some_module.so";
1362	>	#module = "some_module.la";
1363		};

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)