1 |
< |
/* doc/example.conf - ircd-hybrid-8 Example configuration file |
1 |
> |
/* ircd-hybrid reference configuration file |
2 |
|
* Copyright (C) 2000-2013 Hybrid Development Team |
3 |
|
* |
4 |
|
* Written by ejb, wcampbel, db, leeh and others |
5 |
– |
* Other example configurations can be found in the source dir under |
6 |
– |
* doc/. |
5 |
|
* |
6 |
|
* $Id$ |
7 |
|
*/ |
8 |
|
|
9 |
< |
/* IMPORTANT NOTES: |
9 |
> |
/* |
10 |
> |
* ######################################################################## |
11 |
> |
* IMPORTANT NOTES: |
12 |
|
* |
13 |
|
* auth {} blocks MUST be specified in order of precedence. The first one |
14 |
|
* that matches a user will be used. So place spoofs first, then specials, |
15 |
|
* then general access. |
16 |
+ |
* ######################################################################## |
17 |
|
* |
18 |
|
* Shell style (#), C++ style (//) and C style comments are supported. |
19 |
|
* |
33 |
|
* Sizes and times may be singular or plural. |
34 |
|
*/ |
35 |
|
|
36 |
< |
/* EFNET NOTE: |
36 |
< |
* |
37 |
< |
* This config file is NOT suitable for EFNet. EFNet admins should use |
38 |
< |
* example.efnet.conf |
39 |
< |
*/ |
40 |
< |
|
36 |
> |
|
37 |
|
/* |
38 |
|
* serverinfo {}: contains information about the server |
39 |
|
*/ |
47 |
|
* sid: a server's unique ID. This is three characters long and must |
48 |
|
* be in the form [0-9][A-Z0-9][A-Z0-9]. The first character must be |
49 |
|
* a digit, followed by 2 alpha-numerical letters. |
50 |
< |
* NOTE: The letters must be capitalized. This cannot be changed at runtime. |
50 |
> |
* NOTE: The letters must be capitalized. This cannot be changed at runtime. |
51 |
|
*/ |
52 |
< |
sid = "_CHANGE_ME_"; |
52 |
> |
sid = "0HY"; |
53 |
|
|
54 |
|
/* |
55 |
|
* description: the description of the server. |
58 |
|
|
59 |
|
/* |
60 |
|
* network info: the name and description of the network this server |
61 |
< |
* is on. Shown in the 005 reply and used with serverhiding. |
61 |
> |
* is on. Shown in the 005 reply and used with serverhiding. |
62 |
|
*/ |
63 |
|
network_name = "MyNet"; |
64 |
|
network_desc = "This is My Network"; |
81 |
|
*/ |
82 |
|
#vhost6 = "3ffe:80e8:546::2"; |
83 |
|
|
84 |
< |
/* max_clients: the maximum number of clients allowed to connect */ |
84 |
> |
/* max_clients: the maximum number of clients allowed to connect. */ |
85 |
|
max_clients = 512; |
86 |
|
|
87 |
|
/* |
117 |
|
* ssl certificate for encrypted client connection. |
118 |
|
* |
119 |
|
* This assumes your private RSA key is stored in rsa.key. You |
120 |
< |
* MUST have an RSA key in order to generate the certificate |
120 |
> |
* MUST have an RSA key in order to generate the certificate. |
121 |
> |
* |
122 |
> |
* Example command: |
123 |
|
* |
124 |
|
* openssl req -new -days 365 -x509 -key rsa.key -out cert.pem |
125 |
|
* |
194 |
|
* class {}: contains information about classes for users |
195 |
|
*/ |
196 |
|
class { |
197 |
< |
/* name: the name of the class */ |
197 |
> |
/* name: the name of the class. */ |
198 |
|
name = "users"; |
199 |
|
|
200 |
|
/* |
227 |
|
|
228 |
|
/* |
229 |
|
* the following lines are optional and allow you to define |
230 |
< |
* how many users can connect from one /NN subnet |
230 |
> |
* how many users can connect from one /NN subnet. |
231 |
|
*/ |
232 |
|
cidr_bitlen_ipv4 = 24; |
233 |
|
cidr_bitlen_ipv6 = 120; |
255 |
|
sendq = 100 kbytes; |
256 |
|
|
257 |
|
/* |
258 |
< |
* min_idle: minimum idle time that is shown in /whois |
258 |
> |
* min_idle: minimum idle time that is shown in /whois. |
259 |
|
*/ |
260 |
|
min_idle = 3 hours; |
261 |
|
|
262 |
|
/* |
263 |
< |
* max_idle: maximum idle time that is shown in /whois |
263 |
> |
* max_idle: maximum idle time that is shown in /whois. |
264 |
|
*/ |
265 |
|
max_idle = 8 hours; |
266 |
|
|
279 |
|
ping_time = 90 seconds; |
280 |
|
|
281 |
|
/* |
282 |
< |
* connectfreq: only used in server classes. Specifies the delay |
282 |
> |
* connectfreq: only used in server classes. Specifies the delay |
283 |
|
* between autoconnecting to servers. |
284 |
|
*/ |
285 |
|
connectfreq = 5 minutes; |
286 |
|
|
287 |
< |
/* max number: the amount of servers to autoconnect to */ |
287 |
> |
/* max number: the amount of servers to autoconnect to. */ |
288 |
|
max_number = 1; |
289 |
|
|
290 |
< |
/* sendq: servers need a higher sendq as they send more data */ |
290 |
> |
/* sendq: servers need a higher sendq as they send more data. */ |
291 |
|
sendq = 2 megabytes; |
292 |
|
}; |
293 |
|
|
296 |
|
*/ |
297 |
|
listen { |
298 |
|
/* |
299 |
< |
* port: the specific port to listen on. If no host is specified |
299 |
> |
* port: the specific port to listen on. If no host is specified |
300 |
|
* before, it will listen on all available IPs. |
301 |
|
* |
302 |
|
* Ports are separated via a comma, a range may be specified using ".." |
309 |
|
* Listen on 192.168.0.1/6697 with ssl enabled and hidden from STATS P |
310 |
|
* unless you are an administrator. |
311 |
|
* |
312 |
< |
* NOTE: The "flags" directive has to come before "port". Always! |
312 |
> |
* NOTE: The "flags" directive has to come before "port". Always! |
313 |
|
* |
314 |
|
* Currently available flags are: |
315 |
|
* |
323 |
|
|
324 |
|
/* |
325 |
|
* host: set a specific IP/host the ports after the line will listen |
326 |
< |
* on. This may be ipv4 or ipv6. |
326 |
> |
* on. This may be ipv4 or ipv6. |
327 |
|
*/ |
328 |
|
host = "1.2.3.4"; |
329 |
|
port = 7000, 7001; |
353 |
|
encrypted = yes; |
354 |
|
|
355 |
|
/* |
356 |
< |
* spoof: fake the users host to this. This is free-form, |
357 |
< |
* just do everyone a favor and don't abuse it. ('=' prefix on /stats I) |
356 |
> |
* spoof: fake the users host to this. This is free-form, just do |
357 |
> |
* everyone a favor and don't abuse it. ('=' prefix on /stats I) |
358 |
|
*/ |
359 |
|
spoof = "I.still.hate.packets"; |
360 |
|
|
373 |
|
* resv_exempt - exempt this user from resvs ('$' prefix on /stats I) |
374 |
|
* no_tilde - remove ~ from a user with no ident ('-' prefix on /stats I) |
375 |
|
* can_flood - allow this user to exceed flood limits ('|' prefix on /stats I) |
376 |
< |
* webirc - enables WEBIRC authentication for web-based clients such as Mibbit |
376 |
> |
* webirc - enables WEBIRC authentication for web-based clients such as Mibbit |
377 |
|
* ('<' prefix on /stats I) |
378 |
|
*/ |
379 |
|
flags = need_password, spoof_notice, exceed_limit, kline_exempt, |
382 |
|
|
383 |
|
auth { |
384 |
|
/* |
385 |
< |
* redirect: the server and port to redirect a user to. A user does |
386 |
< |
* not have to obey the redirection, the ircd just suggests an alternative |
385 |
> |
* redirect: the server and port to redirect a user to. A user does not |
386 |
> |
* have to obey the redirection, the ircd just suggests an alternative |
387 |
|
* server for them. |
388 |
|
*/ |
389 |
|
redirserv = "this.is.not.a.real.server"; |
403 |
|
|
404 |
|
/* |
405 |
|
* operator {}: defines ircd operators |
408 |
– |
* |
409 |
– |
* ircd-hybrid no longer supports local operators, privileges are |
410 |
– |
* controlled via flags. |
406 |
|
*/ |
407 |
|
operator { |
408 |
|
/* name: the name of the oper */ |
416 |
|
user = "*@127.0.0.0/8"; |
417 |
|
|
418 |
|
/* |
419 |
< |
* password: the password required to oper. By default this will |
419 |
> |
* password: the password required to oper. By default this will |
420 |
|
* need to be encrypted by using the provided mkpasswd tool. |
421 |
|
* Several password hash algorithms are available depending |
422 |
|
* on your system's crypt() implementation. For example, a modern |
442 |
|
class = "opers"; |
443 |
|
|
444 |
|
/* |
445 |
< |
* umodes: default usermodes opers get when they /oper. If defined, |
445 |
> |
* umodes: default usermodes opers get when they /oper. If defined, |
446 |
|
* it will override oper_umodes settings in general {}. |
447 |
|
* Available usermodes: |
448 |
|
* |
451 |
|
* +C - cconn_full - Client connection/quit notices full |
452 |
|
* +D - deaf - Don't receive channel messages |
453 |
|
* +d - debug - See debugging notices |
454 |
+ |
* +e - external - See remote server connection and split notices |
455 |
+ |
* +F - farconnect - Remote client connection/quit notices |
456 |
|
* +f - full - See auth{} block full notices |
457 |
|
* +G - softcallerid - Server Side Ignore for users not on your channels |
458 |
|
* +g - callerid - Server Side Ignore (for privmsgs etc) |
463 |
|
* +k - skill - See server generated KILL messages |
464 |
|
* +l - locops - See LOCOPS messages |
465 |
|
* +n - nchange - See client nick changes |
466 |
+ |
* +R - nononreg - Only receive private messages from registered clients |
467 |
|
* +s - servnotice - See general server notices |
468 |
|
* +u - unauth - See unauthorized client notices |
469 |
|
* +w - wallop - See server generated WALLOPS |
472 |
– |
* +x - external - See remote server connection and split notices |
470 |
|
* +y - spy - See LINKS, STATS, TRACE notices etc. |
471 |
|
* +z - operwall - See oper generated WALLOPS |
472 |
|
*/ |
477 |
|
* allowed to do on the server. All options default to no. |
478 |
|
* Available options: |
479 |
|
* |
480 |
< |
* module - allows MODULE |
481 |
< |
* global_kill - allows remote users to be /KILL'd |
482 |
< |
* remote - allows remote SQUIT and CONNECT |
483 |
< |
* remoteban - allows remote KLINE/UNKLINE |
484 |
< |
* dline - allows DLINE |
485 |
< |
* undline - allows UNDLINE |
486 |
< |
* kline - allows KILL and KLINE |
487 |
< |
* unkline - allows UNKLINE |
488 |
< |
* gline - allows GLINE |
489 |
< |
* xline - allows XLINE |
490 |
< |
* globops - allows GLOBOPS |
491 |
< |
* operwall - allows OPERWALL |
492 |
< |
* nick_changes - allows oper to see nickchanges via usermode +n |
493 |
< |
* rehash - allows oper to REHASH config |
494 |
< |
* die - allows DIE |
495 |
< |
* restart - allows RESTART |
496 |
< |
* set - allows SET |
497 |
< |
* admin - gives admin privileges. admins for example, |
498 |
< |
* may see the real IP addresses of servers. |
480 |
> |
* module - allows MODULE |
481 |
> |
* connect - allows local CONNECT |
482 |
> |
* connect:remote - allows remote CONNECT |
483 |
> |
* squit - allows local SQUIT |
484 |
> |
* squit:remote - allows remote SQUIT |
485 |
> |
* kill - allows to KILL local clients |
486 |
> |
* kill:remote - allows remote users to be /KILL'd |
487 |
> |
* remoteban - allows remote KLINE/UNKLINE |
488 |
> |
* dline - allows DLINE |
489 |
> |
* undline - allows UNDLINE |
490 |
> |
* kline - allows KLINE |
491 |
> |
* unkline - allows UNKLINE |
492 |
> |
* gline - allows GLINE |
493 |
> |
* xline - allows XLINE |
494 |
> |
* globops - allows GLOBOPS |
495 |
> |
* operwall - allows OPERWALL |
496 |
> |
* rehash - allows oper to REHASH config |
497 |
> |
* die - allows DIE |
498 |
> |
* restart - allows RESTART |
499 |
> |
* set - allows SET |
500 |
> |
* admin - gives admin privileges. admins for example, |
501 |
> |
* may see the real IP addresses of servers. |
502 |
|
*/ |
503 |
< |
flags = global_kill, remote, kline, unkline, xline, globops, restart, |
504 |
< |
die, rehash, nick_changes, admin, operwall, module; |
503 |
> |
flags = kill, kill:remote, connect, connect:remote, kline, unkline, |
504 |
> |
xline, globops, restart, die, rehash, admin, operwall, module; |
505 |
|
}; |
506 |
|
|
507 |
|
/* |
523 |
|
name = "irc.uplink.com"; |
524 |
|
|
525 |
|
/* |
526 |
< |
* host: the host or IP to connect to. If a hostname is used it |
526 |
> |
* host: the host or IP to connect to. If a hostname is used it |
527 |
|
* must match the reverse dns of the server. |
528 |
|
*/ |
529 |
|
host = "192.168.0.1"; |
552 |
|
port = 6666; |
553 |
|
|
554 |
|
/* |
555 |
< |
* hub_mask: the mask of servers that this server may hub. Multiple |
556 |
< |
* entries are permitted |
555 |
> |
* hub_mask: the mask of servers that this server may hub. Multiple |
556 |
> |
* entries are permitted. |
557 |
|
*/ |
558 |
|
hub_mask = "*"; |
559 |
|
|
560 |
|
/* |
561 |
< |
* leaf_mask: the mask of servers this server may not hub. Multiple |
562 |
< |
* entries are permitted. Useful for forbidding EU -> US -> EU routes. |
561 |
> |
* leaf_mask: the mask of servers this server may not hub. Multiple |
562 |
> |
* entries are permitted. Useful for forbidding EU -> US -> EU routes. |
563 |
|
*/ |
564 |
|
# leaf_mask = "*.uk"; |
565 |
|
|
642 |
|
* |
643 |
|
* NOTE: This can be effectively used for remote klines. |
644 |
|
* Please note that there is no password authentication |
645 |
< |
* for users setting remote klines. You must also be |
645 |
> |
* for users setting remote klines. You must also be |
646 |
|
* /oper'd in order to issue a remote kline. |
647 |
|
*/ |
648 |
|
shared { |
649 |
|
/* |
650 |
< |
* name: the server the user must be on to set klines. If this is not |
650 |
> |
* name: the server the user must be on to set klines. If this is not |
651 |
|
* specified, the user will be allowed to kline from all servers. |
652 |
|
*/ |
653 |
|
name = "irc2.some.server"; |
654 |
|
|
655 |
|
/* |
656 |
< |
* user: the user@host mask that is allowed to set klines. If this is |
656 |
> |
* user: the user@host mask that is allowed to set klines. If this is |
657 |
|
* not specified, all users on the server above will be allowed to set |
658 |
|
* a remote kline. |
659 |
|
*/ |
684 |
|
reason = "Obviously hacked account"; |
685 |
|
}; |
686 |
|
|
687 |
– |
kill { |
688 |
– |
user = "^O[[:alpha:]]?[[:digit:]]+(x\.o|\.xo)$@^[[:alnum:]]{4}\.evilnet.tld$"; |
689 |
– |
|
690 |
– |
/* |
691 |
– |
* NOTE: You have to set type=regex; when using a regular expression |
692 |
– |
* based user entry |
693 |
– |
*/ |
694 |
– |
type = regex; |
695 |
– |
}; |
696 |
– |
|
687 |
|
/* |
688 |
|
* deny {}: IPs that are not allowed to connect (before DNS/ident lookup) |
689 |
|
* Oper issued dlines will be added to the specified dline config |
694 |
|
}; |
695 |
|
|
696 |
|
/* |
697 |
< |
* exempt {}: IPs that are exempt from deny {} and Dlines |
697 |
> |
* exempt {}: IPs that are exempt from deny {} and Dlines |
698 |
|
*/ |
699 |
|
exempt { |
700 |
|
ip = "192.168.0.0/16"; |
703 |
|
/* |
704 |
|
* resv {}: nicks and channels users may not use/join |
705 |
|
*/ |
706 |
+ |
resv { mask = "clone*"; reason = "Clone bots"; }; |
707 |
+ |
resv { mask = "ChanServ"; reason = "Reserved for services"; }; |
708 |
+ |
resv { mask = "NickServ"; reason = "Reserved for services"; }; |
709 |
+ |
resv { mask = "OperServ"; reason = "Reserved for services"; }; |
710 |
+ |
resv { mask = "MemoServ"; reason = "Reserved for services"; }; |
711 |
+ |
resv { mask = "BotServ"; reason = "Reserved for services"; }; |
712 |
+ |
resv { mask = "HelpServ"; reason = "Reserved for services"; }; |
713 |
+ |
resv { mask = "HostServ"; reason = "Reserved for services"; }; |
714 |
+ |
resv { mask = "StatServ"; reason = "Reserved for services"; }; |
715 |
+ |
resv { mask = "#*services*"; reason = "Reserved for services"; }; |
716 |
+ |
|
717 |
|
resv { |
718 |
< |
/* reason: the reason for the proceeding resv's */ |
719 |
< |
reason = "Reserved for services"; |
718 |
> |
/* |
719 |
> |
* mask: masks starting with a '#' are automatically considered |
720 |
> |
* as channel name mask. |
721 |
> |
*/ |
722 |
> |
mask = "#helsinki"; |
723 |
> |
reason = "Channel is reserved for finnish inhabitants"; |
724 |
|
|
725 |
< |
/* resv: the nicks and channels users may not join/use */ |
726 |
< |
nick = "Global"; |
727 |
< |
nick = "DevNull"; |
728 |
< |
nick = "BotServ"; |
729 |
< |
nick = "Services"; |
730 |
< |
nick = "StatServ"; |
726 |
< |
nick = "HelpServ"; |
727 |
< |
nick = "HostServ"; |
728 |
< |
nick = "NickServ"; |
729 |
< |
nick = "ChanServ"; |
730 |
< |
nick = "MemoServ"; |
731 |
< |
nick = "OperServ"; |
732 |
< |
channel = "#services"; |
733 |
< |
|
734 |
< |
/* resv: wildcard masks are also supported in nicks only */ |
735 |
< |
reason = "Clone bots"; |
736 |
< |
nick = "clone*"; |
725 |
> |
/* |
726 |
> |
* exempt: can be either a ISO 3166 alpha-2 two letter country |
727 |
> |
* code, or a nick!user@host mask. CIDR is supported. Exempt |
728 |
> |
* entries can be stacked. |
729 |
> |
*/ |
730 |
> |
exempt = "FI"; |
731 |
|
}; |
732 |
|
|
733 |
|
/* |
734 |
< |
* gecos {}: The X: replacement, used for banning users based on |
741 |
< |
* their "realname". |
734 |
> |
* gecos {}: Used for banning users based on their "realname". |
735 |
|
*/ |
736 |
|
gecos { |
737 |
|
name = "*sex*"; |
743 |
|
reason = "Trojan drone"; |
744 |
|
}; |
745 |
|
|
753 |
– |
gecos { |
754 |
– |
name = "^\[J[0o]hn Do[3e]\]-[0-9]{2,5}$"; |
755 |
– |
|
756 |
– |
/* |
757 |
– |
* NOTE: You have to set type=regex; when using a regular expression |
758 |
– |
* based name entry |
759 |
– |
*/ |
760 |
– |
type = regex; |
761 |
– |
}; |
762 |
– |
|
746 |
|
/* |
747 |
|
* channel {}: The channel block contains options pertaining to channels |
748 |
|
*/ |
763 |
|
disable_fake_channels = yes; |
764 |
|
|
765 |
|
/* |
783 |
– |
* restrict_channels: reverse channel RESVs logic, only reserved |
784 |
– |
* channels are allowed |
785 |
– |
*/ |
786 |
– |
restrict_channels = no; |
787 |
– |
|
788 |
– |
/* |
766 |
|
* knock_delay: The amount of time a user must wait between issuing |
767 |
|
* the knock command. |
768 |
|
*/ |
786 |
|
*/ |
787 |
|
max_chans_per_oper = 50; |
788 |
|
|
812 |
– |
/* quiet_on_ban: stop banned people talking in channels. */ |
813 |
– |
quiet_on_ban = yes; |
814 |
– |
|
789 |
|
/* max_bans: maximum number of +b/e/I modes in a channel */ |
790 |
|
max_bans = 100; |
791 |
|
|
807 |
|
|
808 |
|
/* |
809 |
|
* default_split_user_count: when the usercount is lower than this level, |
810 |
< |
* consider ourselves split. This must be set for automatic splitmode. |
810 |
> |
* consider ourselves split. This must be set for automatic splitmode. |
811 |
|
*/ |
812 |
|
default_split_user_count = 0; |
813 |
|
|
814 |
|
/* |
815 |
|
* default_split_server_count: when the servercount is lower than this, |
816 |
< |
* consider ourselves split. This must be set for automatic splitmode. |
816 |
> |
* consider ourselves split. This must be set for automatic splitmode. |
817 |
|
*/ |
818 |
|
default_split_server_count = 0; |
819 |
|
|
831 |
|
serverhide { |
832 |
|
/* |
833 |
|
* flatten_links: this option will show all servers in /links appear |
834 |
< |
* that they are linked to this current server |
834 |
> |
* that they are linked to this current server. |
835 |
|
*/ |
836 |
|
flatten_links = no; |
837 |
|
|
843 |
|
|
844 |
|
/* |
845 |
|
* hidden: hide this server from a /links output on servers that |
846 |
< |
* support it. This allows hub servers to be hidden etc. |
846 |
> |
* support it. This allows hub servers to be hidden etc. |
847 |
|
*/ |
848 |
|
hidden = no; |
849 |
|
|
854 |
|
hide_servers = no; |
855 |
|
|
856 |
|
/* |
857 |
+ |
* hide_services: define this if you want to hide the location of |
858 |
+ |
* services servers that are specified in the service{} block. |
859 |
+ |
*/ |
860 |
+ |
hide_services = no; |
861 |
+ |
|
862 |
+ |
/* |
863 |
|
* Use this as the servername users see if hide_servers = yes. |
864 |
|
*/ |
865 |
|
hidden_name = "*.hidden.com"; |
890 |
|
/* max_watch: maximum WATCH entries a client can have. */ |
891 |
|
max_watch = 60; |
892 |
|
|
893 |
< |
/* gline_enable: enable glines, network wide temp klines */ |
893 |
> |
/* gline_enable: enable glines, network wide temp klines. */ |
894 |
|
gline_enable = yes; |
895 |
|
|
896 |
|
/* |
897 |
|
* gline_duration: the amount of time a gline will remain on your |
898 |
< |
* server before expiring |
898 |
> |
* server before expiring. |
899 |
|
*/ |
900 |
|
gline_duration = 1 day; |
901 |
|
|
902 |
|
/* |
903 |
< |
* gline_request_duration: how long a pending G-line can be around. |
904 |
< |
* 10 minutes should be plenty |
903 |
> |
* gline_request_duration: how long a pending G-line can be around. |
904 |
> |
* 10 minutes should be plenty. |
905 |
|
*/ |
906 |
|
gline_request_duration = 10 minutes; |
907 |
|
|
908 |
|
/* |
909 |
|
* gline_min_cidr: the minimum required length of a CIDR bitmask |
910 |
< |
* for IPv4 based glines |
910 |
> |
* for IPv4 based glines. |
911 |
|
*/ |
912 |
|
gline_min_cidr = 16; |
913 |
|
|
914 |
|
/* |
915 |
|
* gline_min_cidr6: the minimum required length of a CIDR bitmask |
916 |
< |
* for IPv6 based glines |
916 |
> |
* for IPv6 based glines. |
917 |
|
*/ |
918 |
|
gline_min_cidr6 = 48; |
919 |
|
|
923 |
|
invisible_on_connect = yes; |
924 |
|
|
925 |
|
/* |
926 |
< |
* Max time from the nickname change that still causes KILL |
927 |
< |
* automatically to switch for the current nick of that user. |
926 |
> |
* kill_chase_time_limit: maximum time from the nickname change that |
927 |
> |
* still causes KILL automatically to switch for the current nick of |
928 |
> |
* that user. |
929 |
|
*/ |
930 |
|
kill_chase_time_limit = 90 seconds; |
931 |
|
|
932 |
|
/* |
933 |
< |
* If hide_spoof_ips is disabled, opers will be allowed to see the real |
933 |
> |
* hide_spoof_ips: if disabled, opers will be allowed to see the real |
934 |
|
* IP of spoofed users in /trace etc. If this is defined they will be |
935 |
|
* shown a masked IP. |
936 |
|
*/ |
937 |
|
hide_spoof_ips = yes; |
938 |
|
|
939 |
|
/* |
940 |
< |
* Ignore bogus timestamps from other servers. Yes, this will desync |
941 |
< |
* the network, but it will allow chanops to resync with a valid non TS 0 |
940 |
> |
* Ignore bogus timestamps from other servers. Yes, this will desync the |
941 |
> |
* network, but it will allow chanops to resync with a valid non TS 0 |
942 |
|
* |
943 |
|
* This should be enabled network wide, or not at all. |
944 |
|
*/ |
950 |
|
*/ |
951 |
|
disable_auth = no; |
952 |
|
|
953 |
< |
/* disable_remote_commands: disable users doing commands on remote servers */ |
953 |
> |
/* disable_remote_commands: disable users doing commands on remote servers. */ |
954 |
|
disable_remote_commands = no; |
955 |
|
|
956 |
|
/* |
961 |
|
|
962 |
|
/* |
963 |
|
* default_floodcount: the default value of floodcount that is configurable |
964 |
< |
* via /quote set floodcount. This is the amount of lines a user |
964 |
> |
* via /quote set floodcount. This is the amount of lines a user |
965 |
|
* may send to any other user/channel in one second. |
966 |
|
*/ |
967 |
|
default_floodcount = 10; |
980 |
|
|
981 |
|
/* |
982 |
|
* min_nonwildcard: the minimum non wildcard characters in k/d/g lines |
983 |
< |
* placed via the server. klines hand placed are exempt from limits. |
983 |
> |
* placed via the server. K-lines hand placed are exempt from limits. |
984 |
|
* wildcard chars: '.' ':' '*' '?' '@' '!' '#' |
985 |
|
*/ |
986 |
|
min_nonwildcard = 4; |
987 |
|
|
988 |
|
/* |
989 |
|
* min_nonwildcard_simple: the minimum non wildcard characters in |
990 |
< |
* gecos bans. wildcard chars: '*' '?' '#' |
990 |
> |
* gecos bans. wildcard chars: '*' '?' '#' |
991 |
|
*/ |
992 |
|
min_nonwildcard_simple = 3; |
993 |
|
|
994 |
< |
/* max_accept: maximum allowed /accept's for +g usermode */ |
994 |
> |
/* max_accept: maximum allowed /accept's for +g usermode. */ |
995 |
|
max_accept = 20; |
996 |
|
|
997 |
< |
/* anti_nick_flood: enable the nickflood control code */ |
997 |
> |
/* anti_nick_flood: enable the nickflood control code. */ |
998 |
|
anti_nick_flood = yes; |
999 |
|
|
1000 |
|
/* nick flood: the nick changes allowed in the specified period */ |
1009 |
|
|
1010 |
|
/* |
1011 |
|
* ts delta: the time delta allowed between server clocks before |
1012 |
< |
* a warning is given, or before the link is dropped. all servers |
1012 |
> |
* a warning is given, or before the link is dropped. All servers |
1013 |
|
* should run ntpdate/rdate to keep clocks in sync |
1014 |
|
*/ |
1015 |
|
ts_warn_delta = 30 seconds; |
1017 |
|
|
1018 |
|
/* |
1019 |
|
* warn_no_nline: warn opers about servers that try to connect but |
1020 |
< |
* we don't have a connect {} block for. Twits with misconfigured |
1020 |
> |
* we don't have a connect {} block for. Twits with misconfigured |
1021 |
|
* servers can get really annoying with this enabled. |
1022 |
|
*/ |
1023 |
|
warn_no_nline = yes; |
1024 |
|
|
1025 |
|
/* |
1026 |
|
* stats_e_disabled: set this to 'yes' to disable "STATS e" for both |
1027 |
< |
* operators and administrators. Doing so is a good idea in case |
1027 |
> |
* operators and administrators. Doing so is a good idea in case |
1028 |
|
* there are any exempted (exempt{}) server IPs you don't want to |
1029 |
|
* see leaked. |
1030 |
|
*/ |
1037 |
|
stats_P_oper_only = yes; |
1038 |
|
|
1039 |
|
/* |
1040 |
< |
* stats i oper only: make stats i (auth {}) oper only. set to: |
1041 |
< |
* yes: show users no auth blocks, made oper only. |
1042 |
< |
* masked: show users first matching auth block |
1043 |
< |
* no: show users all auth blocks. |
1040 |
> |
* stats i oper only: make stats i (auth {}) oper only. Set to: |
1041 |
> |
* yes - show users no auth blocks, made oper only. |
1042 |
> |
* masked - show users first matching auth block |
1043 |
> |
* no - show users all auth blocks. |
1044 |
|
*/ |
1045 |
|
stats_i_oper_only = yes; |
1046 |
|
|
1047 |
|
/* |
1048 |
< |
* stats_k_oper_only: make stats k/K (klines) oper only. set to: |
1049 |
< |
* yes: show users no auth blocks, made oper only |
1050 |
< |
* masked: show users first matching auth block |
1051 |
< |
* no: show users all auth blocks. |
1048 |
> |
* stats_k_oper_only: make stats k/K (klines) oper only. Set to: |
1049 |
> |
* yes - show users no auth blocks, made oper only |
1050 |
> |
* masked - show users first matching auth block |
1051 |
> |
* no - show users all auth blocks. |
1052 |
|
*/ |
1053 |
|
stats_k_oper_only = yes; |
1054 |
|
|
1093 |
|
|
1094 |
|
/* |
1095 |
|
* true_no_oper_flood: completely eliminate flood limits for opers |
1096 |
< |
* and for clients with can_flood = yes in their auth {} blocks |
1096 |
> |
* and for clients with can_flood = yes in their auth {} blocks. |
1097 |
|
*/ |
1098 |
|
true_no_oper_flood = yes; |
1099 |
|
|
1100 |
< |
/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels */ |
1100 |
> |
/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels. */ |
1101 |
|
oper_pass_resv = yes; |
1102 |
|
|
1103 |
|
/* REMOVE ME. The following line checks you've been reading. */ |
1105 |
|
|
1106 |
|
/* |
1107 |
|
* max_targets: the maximum amount of targets in a single |
1108 |
< |
* PRIVMSG/NOTICE. Set to 999 NOT 0 for unlimited. |
1108 |
> |
* PRIVMSG/NOTICE. Set to 999 NOT 0 for unlimited. |
1109 |
|
*/ |
1110 |
|
max_targets = 4; |
1111 |
|
|
1112 |
|
/* |
1132 |
– |
* message_locale: the default message locale |
1133 |
– |
* Use "standard" for the compiled in defaults. |
1134 |
– |
* To install the translated messages, go into messages/ in the |
1135 |
– |
* source directory and run `make install'. |
1136 |
– |
*/ |
1137 |
– |
message_locale = "standard"; |
1138 |
– |
|
1139 |
– |
/* |
1113 |
|
* usermodes configurable: a list of usermodes for the options below |
1114 |
|
* |
1115 |
|
* +b - bots - See bot and drone flooding notices |
1117 |
|
* +C - cconn_full - Client connection/quit notices full |
1118 |
|
* +D - deaf - Don't receive channel messages |
1119 |
|
* +d - debug - See debugging notices |
1120 |
+ |
* +e - external - See remote server connection and split notices |
1121 |
+ |
* +F - farconnect - Remote client connection/quit notices |
1122 |
|
* +f - full - See auth{} block full notices |
1123 |
|
* +G - softcallerid - Server Side Ignore for users not on your channels |
1124 |
|
* +g - callerid - Server Side Ignore (for privmsgs etc) |
1129 |
|
* +k - skill - See server generated KILL messages |
1130 |
|
* +l - locops - See LOCOPS messages |
1131 |
|
* +n - nchange - See client nick changes |
1132 |
+ |
* +R - nononreg - Only receive private messages from registered clients |
1133 |
|
* +s - servnotice - See general server notices |
1134 |
|
* +u - unauth - See unauthorized client notices |
1135 |
|
* +w - wallop - See server generated WALLOPS |
1160 |
– |
* +x - external - See remote server connection and split notices |
1136 |
|
* +y - spy - See LINKS, STATS, TRACE notices etc. |
1137 |
|
* +z - operwall - See oper generated WALLOPS |
1138 |
|
*/ |
1140 |
|
/* oper_only_umodes: usermodes only opers may set */ |
1141 |
|
oper_only_umodes = bots, cconn, cconn_full, debug, full, hidden, skill, |
1142 |
|
nchange, rej, spy, external, operwall, |
1143 |
< |
locops, unauth; |
1143 |
> |
locops, unauth, farconnect; |
1144 |
|
|
1145 |
|
/* oper_umodes: default usermodes opers get when they /oper */ |
1146 |
|
oper_umodes = bots, locops, servnotice, operwall, wallop; |
1147 |
|
|
1148 |
|
/* |
1149 |
|
* use_egd: if your system does not have *random devices yet you |
1150 |
< |
* want to use OpenSSL and encrypted links, enable this. Beware - |
1151 |
< |
* EGD is *very* CPU intensive when gathering data for its pool |
1150 |
> |
* want to use OpenSSL and encrypted links, enable this. Beware - |
1151 |
> |
* EGD is *very* CPU intensive when gathering data for its pool. |
1152 |
|
*/ |
1153 |
|
# use_egd = yes; |
1154 |
|
|
1160 |
|
|
1161 |
|
/* |
1162 |
|
* throttle_time: the minimum amount of time between connections from |
1163 |
< |
* the same ip. exempt {} blocks are excluded from this throttling. |
1164 |
< |
* Offers protection against flooders who reconnect quickly. |
1163 |
> |
* the same ip. exempt {} blocks are excluded from this throttling. |
1164 |
> |
* Offers protection against flooders who reconnect quickly. |
1165 |
|
* Set to 0 to disable. |
1166 |
|
*/ |
1167 |
|
throttle_time = 10; |
1175 |
|
path = "/usr/local/ircd/lib/ircd-hybrid/modules"; |
1176 |
|
path = "/usr/local/ircd/lib/ircd-hybrid/modules/autoload"; |
1177 |
|
|
1178 |
< |
/* module: the name of a module to load on startup/rehash */ |
1178 |
> |
/* module: the name of a module to load on startup/rehash. */ |
1179 |
|
#module = "some_module.la"; |
1180 |
|
}; |
1181 |
|
|
1226 |
|
type = debug; |
1227 |
|
name = "/home/ircd/var/log/debug.log"; |
1228 |
|
size = 50 megabytes; |
1229 |
< |
}; |
1229 |
> |
}; |
1230 |
|
}; |