ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/branches/8.2.x/doc/reference.conf
(Generate patch)

Comparing:
ircd-hybrid-8/etc/example.conf (file contents), Revision 1229 by michael, Mon Sep 19 11:57:21 2011 UTC vs.
ircd-hybrid/trunk/doc/example.conf (file contents), Revision 1783 by michael, Thu Jan 24 19:26:51 2013 UTC

# Line 1 | Line 1
1 < /* doc/example.conf - ircd-hybrid-7 Example configuration file
2 < * Copyright (C) 2000-2011 Hybrid Development Team
1 > /* doc/example.conf - ircd-hybrid-8 Example configuration file
2 > * Copyright (C) 2000-2013 Hybrid Development Team
3   *
4   * Written by ejb, wcampbel, db, leeh and others
5   * Other example configurations can be found in the source dir under
6 < * etc/.
6 > * doc/.
7   *
8   * $Id$
9   */
# Line 24 | Line 24
24   *        12 hours 30 minutes 1 second
25   *        
26   * Valid units of time:
27 < *        month, week, day, hour, minute, second
27 > *        year, month, week, day, hour, minute, second
28   *
29   * Valid units of size:
30   *        megabyte/mbyte/mb, kilobyte/kbyte/kb, byte
# Line 39 | Line 39
39   */
40  
41   /*
42 < * serverinfo {}:  contains information about the server. (OLD M:)
42 > * serverinfo {}:  contains information about the server
43   */
44   serverinfo {
45          /*
# Line 56 | Line 56 | serverinfo {
56          sid = "_CHANGE_ME_";
57  
58          /*
59 <         * description: the description of the server.  '[' and ']' may not
60 <         * be used here for compatibility with older servers.
59 >         * description: the description of the server.
60           */
61 <        description = "hybrid-7 test server";
61 >        description = "ircd-hybrid test server";
62  
63          /*
64           * network info: the name and description of the network this server
# Line 90 | Line 89 | serverinfo {
89          max_clients = 512;
90  
91          /*
92 +         * max_nick_length: only applies to local clients. Must be in the
93 +         * range of 9 to 30. Default is 9 if nothing else is specified.
94 +         */
95 +        max_nick_length = 9;
96 +
97 +        /*
98 +         * max_topic_length: only applies to topics set by local clients.
99 +         * Must be in the range of 80 to 300. Default is 80 if nothing
100 +         * else is specified.
101 +         */
102 +        max_topic_length = 160;
103 +
104 +        /*
105           * rsa_private_key_file: the path to the file containing our
106           * rsa key for cryptlink.
107           *
# Line 125 | Line 137 | serverinfo {
137          #ssl_certificate_file = "/usr/local/ircd/etc/cert.pem";
138  
139          /*
140 <         * ssl_server_protocol:
141 <         * SSL/TLS protocols we provide for incoming secure connections.
140 >         * ssl_dh_param_file:
141 >         *
142 >         * Path to the PEM encoded Diffie-Hellman parameter file.
143 >         * DH parameters are strictly required when using ciphers
144 >         * with EDH (ephemeral Diffie-Hellman) key exchange.
145 >         *
146 >         * A DH parameter file can be created by running:
147 >         *
148 >         *      openssl dhparam -out dhparam.pem 1024
149 >         *
150 >         * Prime size must be at least 1024 bits. Further information
151 >         * regarding specific OpenSSL dhparam command-line options
152 >         * can be found in the OpenSSL manual.
153 >         */
154 >        #ssl_dh_param_file = "/usr/local/ircd/etc/dhparam.pem";
155 >
156 >        /*
157 >         * ssl_cipher_list:
158 >         *
159 >         * List of ciphers that are supported by _this_ server. Can be used to
160 >         * enforce specific ciphers for incoming SSL/TLS connections.
161 >         * If a client (which also includes incoming server connections) isn't
162 >         * capable of any cipher listed below, the connection will simply be
163 >         * rejected.
164 >         *
165 >         * A list of supported ciphers can be obtained by running:
166 >         *
167 >         *      openssl ciphers -ssl3 -tls1 -v
168 >         *
169 >         * Multiple ciphers are separated by colons. The order of preference is
170 >         * from left to right.
171 >         */
172 >        #ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
173 >
174 >        /*
175 >         * ssl_server_method:
176 >         * ssl_client_method:
177 >         *
178 >         * SSL/TLS methods we provide for incoming (server method) and
179 >         * outgoing (client method) SSL/TLS connections.
180           * This can be either sslv3 for SSLv3, and/or tlsv1 for TLSv1.
131         * SSLv2 is not suppported. This cannot be changed at runtime.
181           */
182 <        #ssl_server_protocol = sslv3, tlsv1;
182 >        #ssl_server_method = tlsv1, sslv3;
183 >        #ssl_client_method = tlsv1;
184   };
185  
186   /*
# Line 143 | Line 193 | admin {
193   };
194  
195   /*
146 * log {}:  contains information about logfiles.
147 */
148 log {
149        /* Do you want to enable logging to ircd.log? */
150        use_logging = yes;
151
152        /*
153         * logfiles: the logfiles to use for user connects, /oper uses,
154         * and failed /oper.  These files must exist for logging to be used.
155         */
156        fname_userlog = "logs/userlog";
157        fname_operlog = "logs/operlog";
158        fname_killlog = "logs/kill";
159        fname_klinelog = "logs/kline";
160        fname_glinelog = "logs/gline";
161
162        /*
163         * log_level: the amount of detail to log in ircd.log.  The
164         * higher, the more information is logged.  May be changed
165         * once the server is running via /quote SET LOG.  Either:
166         * L_CRIT, L_ERROR, L_WARN, L_NOTICE, L_TRACE, L_INFO or L_DEBUG
167         */
168        log_level = L_INFO;
169 };
170
171 /*
196   * class {}:  contains information about classes for users
197   */
198   class {
199 <        /* name: the name of the class.  classes are text now */
199 >        /* name: the name of the class */
200          name = "users";
201  
202          /*
# Line 212 | Line 236 | class {
236          number_per_cidr = 16;
237  
238          /*
239 <         * sendq: the amount of data allowed in a clients queue before
239 >         * sendq: the amount of data allowed in a clients send queue before
240           * they are dropped.
241           */
242          sendq = 100 kbytes;
243 +
244 +        /*
245 +         * recvq: maximum amount of data in a clients receive queue before
246 +         * they are dropped for flooding. Defaults to 2560 if the chosen
247 +         * value isn't within the range of 512 to 8000.
248 +         */
249 +        recvq = 2560 bytes;
250   };
251  
252   class {
# Line 223 | Line 254 | class {
254          ping_time = 90 seconds;
255          number_per_ip = 10;
256          max_number = 100;
257 <        sendq = 100kbytes;
257 >        sendq = 100 kbytes;
258 >
259 >        /*
260 >         * min_idle: minimum idle time that is shown in /whois
261 >         */
262 >        min_idle = 3 hours;
263 >
264 >        /*
265 >         * max_idle: maximum idle time that is shown in /whois
266 >         */
267 >        max_idle = 8 hours;
268 >
269 >        /*
270 >         * flags:
271 >         *
272 >         * random_idle          - idle time is randomly selected within the
273 >         *                        range of min_idle to max_idle
274 >         * hide_idle_from_opers - fake idle time will be shown to operators, too
275 >         */
276 >        flags = random_idle, hide_idle_from_opers;
277   };
278  
279   class {
# Line 231 | Line 281 | class {
281          ping_time = 90 seconds;
282  
283          /*
234         * ping_warning: how fast a server must reply to a PING before
235         * a warning to opers is generated.
236         */
237        ping_warning = 15 seconds;
238
239        /*
284           * connectfreq: only used in server classes.  Specifies the delay
285           * between autoconnecting to servers.
286           */
# Line 271 | Line 315 | listen {
315           *
316           * Currently available flags are:
317           *
318 <         *  ssl    - Port is for SSL client connections only
318 >         *  ssl    - Port may only accept TLS/SSL connections
319           *  server - Only server connections are permitted
320           *  hidden - Port is hidden from /stats P, unless you're an admin
321           */
# Line 295 | Line 339 | listen {
339   */
340   auth {
341          /*
342 <         * user: the user@host allowed to connect.  Multiple IPv4/IPv6 user
342 >         * user: the user@host allowed to connect. Multiple user
343           * lines are permitted per auth block.
344           */
345          user = "*@172.16.0.0/12";
# Line 331 | Line 375 | auth {
375           * resv_exempt   - exempt this user from resvs ('$' prefix on /stats I)
376           * no_tilde      - remove ~ from a user with no ident ('-' prefix on /stats I)
377           * can_flood     - allow this user to exceed flood limits ('|' prefix on /stats I)
378 +         * webirc        - enables WEBIRC authentication for web-based clients such as Mibbit
379 +         *                 ('<' prefix on /stats I)
380           */
381          flags = need_password, spoof_notice, exceed_limit, kline_exempt,
382                  gline_exempt, resv_exempt, no_tilde, can_flood;
# Line 365 | Line 411 | auth {
411   */
412   operator {
413          /* name: the name of the oper */
414 <        /* NOTE: operator "opername"{} is also supported */
369 <        name = "god";
414 >        name = "sheep";
415  
416          /*
417 <         * user: the user@host required for this operator.  CIDR is not
418 <         * supported.  Multiple user="" lines are supported.
417 >         * user: the user@host required for this operator. Multiple
418 >         * user="" lines are supported.
419           */
420 <        user = "*god@*";
421 <        user = "*@127.0.0.1";
420 >        user = "*sheep@192.168.0.0/16";
421 >        user = "*@127.0.0.0/8";
422  
423          /*
424           * password: the password required to oper.  By default this will
# Line 411 | Line 456 | operator {
456           * +C - cconn_full   - Client connection/quit notices full
457           * +D - deaf         - Don't receive channel messages
458           * +d - debug        - See debugging notices
459 <         * +f - full         - See I: line full notices
459 >         * +f - full         - See auth{} block full notices
460           * +G - softcallerid - Server Side Ignore for users not on your channels
461           * +g - callerid     - Server Side Ignore (for privmsgs etc)
462 +         * +H - hidden       - Hides operator status to other users
463           * +i - invisible    - Not shown in NAMES or WHO unless you share a
464           *                     a channel
465 +         * +j - rej          - See rejected client notices
466           * +k - skill        - See server generated KILL messages
467           * +l - locops       - See LOCOPS messages
468           * +n - nchange      - See client nick changes
422         * +r - rej          - See rejected client notices
469           * +s - servnotice   - See general server notices
470           * +u - unauth       - See unauthorized client notices
471           * +w - wallop       - See server generated WALLOPS
# Line 434 | Line 480 | operator {
480           * allowed to do on the server. All options default to no.
481           * Available options:
482           *
483 <         * module       - allows MODLIST, MODRESTART, MODLOAD, MODUNLOAD
483 >         * module       - allows MODULE
484           * global_kill  - allows remote users to be /KILL'd
485           * remote       - allows remote SQUIT and CONNECT
486           * remoteban    - allows remote KLINE/UNKLINE
487 <         * kline        - allows KILL, KLINE and DLINE
488 <         * unkline      - allows UNKLINE and UNDLINE
487 >         * dline        - allows DLINE
488 >         * undline      - allows UNDLINE
489 >         * kline        - allows KILL and KLINE
490 >         * unkline      - allows UNKLINE
491           * gline        - allows GLINE
492           * xline        - allows XLINE
493           * globops      - allows GLOBOPS
# Line 448 | Line 496 | operator {
496           * rehash       - allows oper to REHASH config
497           * die          - allows DIE
498           * restart      - allows RESTART
499 +         * set          - allows SET
500           * admin        - gives admin privileges. admins for example,
501           *                may see the real IP addresses of servers.
453         * hidden_admin - same as 'admin', but noone can recognize you as
454         *                being an admin
455         * hidden_oper  - not shown in /stats p (except for other operators)
502           */
503          flags = global_kill, remote, kline, unkline, xline, globops, restart,
504                  die, rehash, nick_changes, admin, operwall, module;
505   };
506  
507 + /*
508 + * service {}: specifies what server may act as a network service
509 + *
510 + * NOTE: it is absolutely important that every single server on the network
511 + *       has the same service{} block.
512 + */
513   service {
514          name = "service.someserver";
515 <        name = "stats.someserver;
515 >        name = "stats.someserver";
516   };
517  
518   /*
# Line 515 | Line 567 | connect {
567          class = "server";
568  
569          /*
570 <         * autoconn   - controls whether we autoconnect to this server or not,
571 <         *              dependent on class limits. By default, this is disabled.
572 <         * compressed - controls whether traffic is compressed via ziplinks.
573 <         *              By default, this is disabled
574 <         * cryptlink  - enable full encryption for all data passing between our
575 <         *              server and this link and rsa authentication.
576 <         * burst_away - This will send the /away string that users have set
577 <         *              on the server burst.  Note this can be a lot of data
578 <         *              and slow down your server burst.
579 <         * topicburst - Send topics to this server during channel burst.  Works
528 <         *              only if the server we are connecting to is capable
529 <         *              of TBURST/TB.
530 <         */
531 < #       flags = autoconn, compressed, cryptlink, burst_away, topicburst;
532 < };
533 <
534 < connect {
535 <        name = "encrypted.auth.example";
536 <        host = "some.host.somewhere";
537 <        port = 6667;
538 <
539 <        flags = cryptlink;
540 <
541 <        /*
542 <         * rsa_public_key_file: the path to the public keyfile of the server.
543 <         * Used instead of passwords.
570 >         * ssl_cipher_list:
571 >         *
572 >         * List of ciphers that the server we are connecting to must support.
573 >         * If the server isn't capable of any cipher listed below, the
574 >         * connection will simply be rejected.
575 >         * Can be used to enforce stronger ciphers, even though this option
576 >         * is not necessarily required to establish a SSL/TLS connection.
577 >         *
578 >         * Multiple ciphers are separated by colons. The order of preference
579 >         * is from left to right.
580           */
581 <        rsa_public_key_file = "etc/remote.server.keyfile";
581 >        #ssl_cipher_list = "DHE-RSA-AES256-SHA:AES256-SHA";
582  
583          /*
584 <         * cipher preference: set the preferred cipher for this link
585 <         *
586 <         * Available ciphers are:
551 <         *      BF/168 BF/128 CAST/128 IDEA/128 RC5.16/128
552 <         *      RC5.12/128 RC5.8/128 3DES/168 DES/56
553 <         *
554 <         * NOTE:  Some ciphers may not be supported by your OpenSSL.
555 <         *        Check the output from 'configure' for available ciphers.
556 <         *
557 <         * NOTE2: To help you decide what cipher to use, tools/encspeed
558 <         *        will show you approximately how fast each cipher is.
559 <         *        However, blowfish is fast and secure, and is probably
560 <         *        a good default for most situations.
561 <         *
562 <         * NOTE3: Default if none is set is BF/128
563 <         *
564 <         * The cipher *MUST* be the same in both directions.  If you
565 <         * set a cipher preference, your uplink must set the same cipher,
566 <         * else it will not link.
584 >         * autoconn   - controls whether we autoconnect to this server or not,
585 >         *              dependent on class limits. By default, this is disabled.
586 >         * ssl        - Initiates a TLS/SSL connection.
587           */
588 < #       cipher_preference = "BF/168";
588 > #       flags = autoconn, ssl;
589   };
590  
591 < /*
592 < * NOTE: Don't add an extra 'name=' entry if you use
573 < * the connect "name"{} feature
574 < */
575 < connect "ipv6.some.server" {
591 > connect {
592 >        name = "ipv6.some.server";
593          host = "3ffd:dead:beef::1";
594          send_password = "password";
595          accept_password = "password";
# Line 606 | Line 623 | cluster {
623  
624          /*
625           * type: list of what to share, options are as follows:
626 <         *      kline   - share klines
627 <         *      tkline  - share temporary klines
628 <         *      unkline - share unklines
629 <         *      xline   - share xlines
630 <         *      txline  - share temporary xlines
631 <         *      unxline - share unxlines
632 <         *      resv    - share resvs
633 <         *      tresv   - share temporary resvs
634 <         *      unresv  - share unresvs
635 <         *      locops  - share locops
619 <         *      all     - share all of the above (default)
626 >         *      dline   - share dlines
627 >         *      undline - share undlines
628 >         *      kline   - share klines
629 >         *      unkline - share unklines
630 >         *      xline   - share xlines
631 >         *      unxline - share unxlines
632 >         *      resv    - share resvs
633 >         *      unresv  - share unresvs
634 >         *      locops  - share locops
635 >         *      all     - share all of the above (default)
636           */
637          type = kline, unkline, locops, xline, resv;
638   };
# Line 645 | Line 661 | shared {
661  
662          /*
663           * type: list of what to share, options are as follows:
664 <         *      kline   - allow oper/server to kline
665 <         *      tkline  - allow temporary klines
666 <         *      unkline - allow oper/server to unkline
667 <         *      xline   - allow oper/server to xline
668 <         *      txline  - allow temporary xlines
669 <         *      unxline - allow oper/server to unxline
670 <         *      resv    - allow oper/server to resv
671 <         *      tresv   - allow temporary resvs
656 <         *      unresv  - allow oper/server to unresv
664 >         *      dline   - allow oper/server to dline
665 >         *      undline - allow oper/server to undline
666 >         *      kline   - allow oper/server to kline
667 >         *      unkline - allow oper/server to unkline
668 >         *      xline   - allow oper/server to xline
669 >         *      unxline - allow oper/server to unxline
670 >         *      resv    - allow oper/server to resv
671 >         *      unresv  - allow oper/server to unresv
672           *      locops  - allow oper/server to locops - only used for servers that cluster
673 <         *      all     - allow oper/server to do all of the above (default)
673 >         *      all     - allow oper/server to do all of the above (default)
674           */
675          type = kline, unkline, resv;
676   };
# Line 705 | Line 720 | resv {
720          /* resv: the nicks and channels users may not join/use */
721          nick = "Global";
722          nick = "DevNull";
723 +        nick = "BotServ";
724          nick = "Services";
725          nick = "StatServ";
726 +        nick = "HelpServ";
727          nick = "HostServ";
728          nick = "NickServ";
729          nick = "ChanServ";
# Line 734 | Line 751 | gecos {
751   };
752  
753   gecos {
737        name = "*http*";
738        reason = "Spambot";
739 };
740
741 gecos {
754          name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$";
755  
756          /*
# Line 761 | Line 773 | channel {
773           *   3 | mirc color
774           *  15 | plain text
775           *  22 | reverse
776 +         *  29 | italic
777           *  31 | underline
778           * 160 | non-breaking space
779           */
# Line 773 | Line 786 | channel {
786          restrict_channels = no;
787  
788          /*
776         * disable_local_channels: prevent users from joining &channels.
777         */
778        disable_local_channels = no;
779
780        /*
781         * use_invex: Enable/disable channel mode +I, a n!u@h list of masks
782         * that can join a +i channel without an invite.
783         */
784        use_invex = yes;
785
786        /*
787         * use_except: Enable/disable channel mode +e, a n!u@h list of masks
788         * that can join a channel through a ban (+b).
789         */
790        use_except = yes;
791
792        /*
793         * use_knock: Allows users to request an invite to a channel that
794         * is locked somehow (+ikl).  If the channel is +p or you are banned
795         * the knock will not be sent.
796         */
797        use_knock = yes;
798
799        /*
789           * knock_delay: The amount of time a user must wait between issuing
790           * the knock command.
791           */
# Line 809 | Line 798 | channel {
798          knock_delay_channel = 1 minute;
799  
800          /*
801 <         * burst_topicwho: enable sending of who set topic on topicburst
802 <         * default is yes
801 >         * max_chans_per_user: The maximum number of channels a user can
802 >         * join/be on.
803           */
804 <        burst_topicwho = yes;
804 >        max_chans_per_user = 25;
805  
806          /*
807 <         * max_chans_per_user: The maximum number of channels a user can
807 >         * max_chans_per_oper: The maximum number of channels an oper can
808           * join/be on.
809           */
810 <        max_chans_per_user = 25;
810 >        max_chans_per_oper = 50;
811  
812          /* quiet_on_ban: stop banned people talking in channels. */
813          quiet_on_ban = yes;
814  
815          /* max_bans: maximum number of +b/e/I modes in a channel */
816 <        max_bans = 25;
816 >        max_bans = 100;
817  
818          /*
819           * how many joins in how many seconds constitute a flood, use 0 to
# Line 885 | Line 874 | serverhide {
874          hidden = no;
875  
876          /*
888         * disable_hidden: prevent servers hiding themselves from a
889         * /links output.
890         */
891        disable_hidden = no;
892
893        /*
877           * hide_servers: hide remote servernames everywhere and instead use
878           * hidden_name and network_desc.
879           */
# Line 911 | Line 894 | serverhide {
894           * logfiles.
895           *
896           * We recommend you leave this disabled, and just take care with who you
897 <         * give admin=yes; to.
897 >         * give administrator privileges to.
898           */
899          hide_server_ips = no;
900   };
901  
902   /*
903   * general {}:  The general block contains many of the options that were once
904 < * compiled in options in config.h.  The general block is read at start time.
904 > * compiled in options in config.h
905   */
906   general {
907          /* services_name: servername of nick/channel services */
# Line 927 | Line 910 | general {
910          /* max_watch: maximum WATCH entries a client can have. */
911          max_watch = 60;
912  
913 +        /* gline_enable: enable glines, network wide temp klines */
914 +        gline_enable = yes;
915 +
916 +        /*
917 +         * gline_duration: the amount of time a gline will remain on your
918 +         * server before expiring
919 +         */
920 +        gline_duration = 1 day;
921 +
922 +        /*
923 +         * gline_request_duration:  how long a pending G-line can be around.
924 +         * 10 minutes should be plenty
925 +         */
926 +        gline_request_duration = 10 minutes;
927 +
928          /*
929           * gline_min_cidr: the minimum required length of a CIDR bitmask
930           * for IPv4 based glines
# Line 945 | Line 943 | general {
943          invisible_on_connect = yes;
944  
945          /*
948         * If you don't explicitly specify burst_away in your connect blocks, then
949         * they will default to the burst_away value below.
950         */
951        burst_away = no;
952
953        /*
954         * Show "actually using host <ip>" on /whois when possible.
955         */
956        use_whois_actually = yes;
957
958        /*
946           * Max time from the nickname change that still causes KILL
947           * automatically to switch for the current nick of that user.
948           */
# Line 1048 | Line 1035 | general {
1035          ts_max_delta = 5 minutes;
1036  
1037          /*
1051         * kline_with_reason: show the user the reason why they are k/d/glined
1052         * on exit.  May give away who set k/dline when set via tcm.
1053         */
1054        kline_with_reason = yes;
1055
1056        /*
1057         * kline_reason: show this message to users on channel
1058         * instead of the oper reason.
1059         */
1060        kline_reason = "Connection closed";
1061
1062        /*
1063         * reject_hold_time: wait this amount of time before disconnecting
1064         * a rejected client. Use 0 to disable.
1065         */
1066        reject_hold_time = 0;
1067
1068        /*
1038           * warn_no_nline: warn opers about servers that try to connect but
1039           * we don't have a connect {} block for.  Twits with misconfigured
1040           * servers can get really annoying with this enabled.
# Line 1122 | Line 1091 | general {
1091  
1092          /*
1093           * pace_wait: time between more intensive commands
1094 <         * (INFO, LINKS, LIST, MAP, MOTD, STATS, WHO, wildcard WHOIS, WHOWAS)
1094 >         * (AWAY, INFO, LINKS, MAP, MOTD, STATS, WHO, wildcard WHOIS, WHOWAS)
1095           */
1096          pace_wait = 10 seconds;
1097  
# Line 1160 | Line 1129 | general {
1129          max_targets = 4;
1130  
1131          /*
1163         * client_flood: maximum amount of data in a clients queue before
1164         * they are dropped for flooding.
1165         */
1166        client_flood = 2560 bytes;
1167
1168        /*
1132           * message_locale: the default message locale
1133           * Use "standard" for the compiled in defaults.
1134           * To install the translated messages, go into messages/ in the
# Line 1181 | Line 1144 | general {
1144           * +C - cconn_full   - Client connection/quit notices full
1145           * +D - deaf         - Don't receive channel messages
1146           * +d - debug        - See debugging notices
1147 <         * +f - full         - See I: line full notices
1147 >         * +f - full         - See auth{} block full notices
1148           * +G - softcallerid - Server Side Ignore for users not on your channels
1149           * +g - callerid     - Server Side Ignore (for privmsgs etc)
1150 +         * +H - hidden       - Hides operator status to other users
1151           * +i - invisible    - Not shown in NAMES or WHO unless you share a
1152           *                     a channel
1153 +         * +j - rej          - See rejected client notices
1154           * +k - skill        - See server generated KILL messages
1155           * +l - locops       - See LOCOPS messages
1156           * +n - nchange      - See client nick changes
1192         * +r - rej          - See rejected client notices
1157           * +s - servnotice   - See general server notices
1158           * +u - unauth       - See unauthorized client notices
1159           * +w - wallop       - See server generated WALLOPS
# Line 1199 | Line 1163 | general {
1163           */
1164  
1165          /* oper_only_umodes: usermodes only opers may set */
1166 <        oper_only_umodes = bots, cconn, cconn_full, debug, full, skill,
1166 >        oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill,
1167                             nchange, rej, spy, external, operwall,
1168                             locops, unauth;
1169  
# Line 1207 | Line 1171 | general {
1171          oper_umodes = bots, locops, servnotice, operwall, wallop;
1172  
1173          /*
1210         * servlink_path: path to 'servlink' program used by ircd to handle
1211         * encrypted/compressed server <-> server links.
1212         *
1213         * only define if servlink is not in same directory as ircd itself.
1214         */
1215        #servlink_path = "/usr/local/ircd/bin/servlink";
1216
1217        /*
1218         * default_cipher_preference: default cipher to use for cryptlink when none is
1219         * specified in connect block.
1220         */
1221        #default_cipher_preference = "BF/168";
1222
1223        /*
1174           * use_egd: if your system does not have *random devices yet you
1175           * want to use OpenSSL and encrypted links, enable this.  Beware -
1176           * EGD is *very* CPU intensive when gathering data for its pool
# Line 1233 | Line 1183 | general {
1183           */
1184   #       egdpool_path = "/var/run/egd-pool";
1185  
1236
1237        /*
1238         * compression_level: level of compression for compressed links between
1239         * servers.  
1240         *
1241         * values are between: 1 (least compression, fastest)
1242         *                and: 9 (most compression, slowest).
1243         */
1244 #       compression_level = 6;
1245
1186          /*
1187           * throttle_time: the minimum amount of time between connections from
1188           * the same ip.  exempt {} blocks are excluded from this throttling.
# Line 1252 | Line 1192 | general {
1192          throttle_time = 10;
1193   };
1194  
1255 glines {
1256        /* enable: enable glines, network wide temp klines */
1257        enable = yes;
1258
1259        /*
1260         * duration: the amount of time a gline will remain on your
1261         * server before expiring
1262         */
1263        duration = 1 day;
1264
1265        /*
1266         * logging: which types of rules you want to log when triggered
1267         * (choose reject or block)
1268         */
1269        logging = reject, block;
1270
1271        /*
1272         * NOTE: gline ACLs can cause a desync of glines throughout the
1273         * network, meaning some servers may have a gline triggered, and
1274         * others may not. Also, you only need insert rules for glines
1275         * that you want to block and/or reject. If you want to accept and
1276         * propagate the gline, do NOT put a rule for it.
1277         */
1278
1279        /* user@host for rule to apply to */
1280        user = "god@I.still.hate.packets";
1281        /* server for rule to apply to */
1282        name = "hades.arpa";
1283
1284        /*
1285         * action: action to take when a matching gline is found. options are:
1286         *  reject      - do not apply the gline locally
1287         *  block       - do not propagate the gline
1288         */
1289        action = reject, block;
1290
1291        user = "god@*";
1292        name = "*";
1293        action = block;
1294 };
1295
1195   modules {
1196          /*
1197           * path: other paths to search for modules specified below
1198 <         * and in /modload.
1198 >         * and in "/module load".
1199           */
1200          path = "/usr/local/ircd/lib/ircd-hybrid/modules";
1201          path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload";
# Line 1304 | Line 1203 | modules {
1203          /* module: the name of a module to load on startup/rehash */
1204          #module = "some_module.la";
1205   };
1206 +
1207 + /*
1208 + * log {}:  contains information about logfiles.
1209 + */
1210 + log {
1211 +        /* Do you want to enable logging to ircd.log? */
1212 +        use_logging = yes;
1213 +
1214 +        file {
1215 +                type = oper;
1216 +                name = "/home/ircd/var/log/oper.log";
1217 +                size = unlimited;
1218 +        };
1219 +
1220 +        file {
1221 +                type = user;
1222 +                name = "/home/ircd/var/log/user.log";
1223 +                size = 50 megabytes;
1224 +        };
1225 +
1226 +        file {
1227 +                type = kill;
1228 +                name = "/home/ircd/var/log/kill.log";
1229 +                size = 50 megabytes;
1230 +        };
1231 +
1232 +        file {
1233 +                type = kline;
1234 +                name = "/home/ircd/var/log/kline.log";
1235 +                size = 50 megabytes;
1236 +        };
1237 +
1238 +        file {
1239 +                type = dline;
1240 +                name = "/home/ircd/var/log/dline.log";
1241 +                size = 50 megabytes;
1242 +        };
1243 +
1244 +        file {
1245 +                type = gline;
1246 +                name = "/home/ircd/var/log/gline.log";
1247 +                size = 50 megabytes;
1248 +        };
1249 +
1250 +        file {
1251 +                type = debug;
1252 +                name = "/home/ircd/var/log/debug.log";
1253 +                size = 50 megabytes;
1254 +        };
1255 + };

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)