/* Configuration file for UnrealIRCd 4.0
 *
 * Simply copy this file to your conf/ directory, call it
 * 'unrealircd.conf' and walk through it line by line (edit it!)
 *
 * Important: All lines, except the opening { line, end with an ;
 * including };. This is very important, if you miss a ; somewhere then
 * the configuration file parser will complain and your file will not
 * be processed correctly!
 * If this is your first experience with an UnrealIRCd configuration
 * file then we really recommend you to read a little about the syntax,
 * this only takes a few minutes and will help you a lot:
 * https://www.unrealircd.org/docs/Configuration#Configuration_file_syntax
 *
 * UnrealIRCd 4 documentation (very extensive!):
 * https://www.unrealircd.org/docs/UnrealIRCd_4_documentation
 *
 * Frequently Asked Questions:
 * https://www.unrealircd.org/docs/FAQ
 *
 */

/* This is a comment, all text here is ignored (comment type #1) */
// This is also a comment, this line is ignored (comment type #2)
# This is also a comment, again this line is ignored (comment type #3)

/* UnrealIRCd makes heavy use of modules. Modules allow you to completely
 * customize the featureset you wish to enable in UnrealIRCd.
 * See: https://www.unrealircd.org/docs/Modules
 *
 * By using the include below we instruct the IRCd to read the file
 * 'modules.default.conf' which will load more than 150 modules
 * shipped with UnrealIRCd. In other words: this will simply load
 * all the available features in UnrealIRCd.
 * If you are setting up UnrealIRCd for the first time we suggest you
 * use this. Then, when everything is up and running you can come
 * back later to customize the list (if you wish).
 */
include "modules.default.conf";

/* Now let's include some other files as well:
 * - help/help.conf for our on-IRC /HELPOP system
 * - badwords.conf for channel and user mode +G
 * - spamfilter.conf as an example for spamfilter usage
 * - operclass.default.conf contains some good operclasses which
 *   you can use in your oper blocks.
 */
include "help/help.conf";
include "badwords.conf";
include "spamfilter.conf";
include "operclass.default.conf";

/* This is the me { } block which basically says who we are.
 * It defines our server name, some information line and an unique "sid".
 * The server id (sid) must start with a digit followed by two digits or
 * letters. The sid must be unique for your IRC network (each server should
 * have it's own sid).
 */
me {
	name "Medan.WNet";
	info "( Ibu Kota Prov. Sumatera Utara - Indonesia )";
	sid "002";
};

/* The admin { } block defines what users will see if they type /ADMIN.
 * It normally contains information on how to contact the administrator.
 */
admin {
	"This server is administered by: w";
};

/* Clients and servers are put in class { } blocks, we define them here.
 * Class blocks consist of the following items:
 * - pingfreq: how often to ping a user / server (in seconds)
 * - connfreq: how often we try to connect to this server (in seconds)
 * - sendq: the maximum queue size for a connection
 * - recvq: maximum receive queue from a connection (flood control)
 */

/* Client class with good defaults */
class clients
{
	pingfreq 90;
	maxclients 1000;
	sendq 200k;
	recvq 8000;
};

/* Special class for IRCOps with higher limits */
class opers
{
	pingfreq 90;
	maxclients 50;
	sendq 1M;
	recvq 8000;
};

/* Server class with good defaults */
class servers
{
	pingfreq 60;
	connfreq 15; /* try to connect every 15 seconds */
	maxclients 10; /* max servers */
	sendq 20M;
};

/* Allow blocks define which clients may connect to this server.
 * This allows you to add a server password or restrict the server to
 * specific IP's only. You also configure the maximum connections
 * allowed per IP here.
 * See also: https://www.unrealircd.org/docs/Allow_block
 */

/* Allow everyone in, but only 3 connections per IP */
allow {
	ip *@*;
	class clients;
	maxperip 3;
};

/* Example of a special allow block on a specific IP:
 * Requires users on that IP to connect with a password. If the password
 * is correct then it permits 20 connections on that IP.
 */
allow {
	ip *@192.168.1.*;
	class clients;
	password "$2yXOEOQDo3X/s6jOunN7oJIvVwWVclO736IPa";
	maxperip 200;
};


/* Oper blocks define your IRC Operators.
 * IRC Operators are people who have "extra rights" compared to others,
 * for example they may /KILL other people, initiate server linking,
 * /JOIN channels even though they are banned, etc.
 *
 * For more information about becoming an IRCOp and how to do admin
 * tasks, see: https://www.unrealircd.org/docs/IRCOp_guide
 *
 * For details regarding the oper { } block itself, see
 * https://www.unrealircd.org/docs/Oper_block
 */

/* Here is an example oper block for 'bobsmith' with password 'test'.
 * You MUST change this!!
 */

oper abi {
	class opers;
	mask *@*;
	password "k5wy8YxAlLZEMvEfGCukou89MA5OsZRTl3eR3QI";
	operclass locop;
	swhois "is a Local IRC Operator";
	vhost Staff.WNet;
};


/* Listen blocks define the ports where the server should listen on.
 * In other words: the ports that clients and servers may use to
 * connect to this server.
 *
 * Syntax:
 * listen {
 * {
 *   ip <ip>;
 *   port <port>;
 *   options {
 *     <options....>;
 *   };
 * };
 */

/* Standard IRC SSL/TLS port 6697 */
listen {
	ip 35.212.234.37;
	port 6667;
	options { ssl; };
};

/* Standard IRC port 6667 */
listen {
	ip 2607:5600:1b8:14e7:20d3:fEcb:aF6E:6453;
	port 6667;
};

/* Standard IRC SSL/TLS port 6697 */
listen {
	ip 2607:5600:1b8:14e7:20d3:fEcb:aF6E:6453;
	port 6697;
	options { ssl; };
};

listen {
        ip 2607:5600:1b8:14e7:20d3:fEcb:aF6E:6453;
        port 6666;
        options { ssl; serversonly; };
};

/* NOTE: If you are on an IRCd shell with multiple IP's and you use
 *       the above listen { } blocks then you will likely get an
 *       'Address already in use' error and the ircd won't start.
 *       This means you MUST bind to a specific IP instead of '*' like:
 *       listen { ip 1.2.3.4; port 6667; };
 *       Of course, replace the IP with the IP that was assigned to you.
 */

/*
 * Link blocks allow you to link multiple servers together to form a network.
 * See https://www.unrealircd.org/docs/Tutorial:_Linking_servers
 */
link Batam.WNet
{
	incoming {
		mask *;
	};

	outgoing {
		bind-ip *; /* or explicitly an IP */
		hostname batam-v6.wnet.my.id;
		port 6666;
		options { ssl; autoconnect; };
	};

	/* We use the SPKI fingerprint of the other server for authentication.
	 * Run './unrealircd spkifp' on the other side to get it.
	 * NOTE: requires UnrealIRCd 4.0.16 or later.
	 */
	password "passwd" { spkifp; };
	hub *;
	class servers;
};

/* The link block for services is usually much simpler.
 * For more information about what Services are,
 * see https://www.unrealircd.org/docs/Services
 */

/* U-lines give other servers (even) more power/commands.
 * If you use services you must add them here.
 * NEVER put the name of an UnrealIRCd server here!!!
 */
ulines {
	WNet.;
	Stats.;
};

/* Here you can add a password for the IRCOp-only /DIE and /RESTART commands.
 * This is mainly meant to provide a little protection against accidental
 * restarts and server kills.
 */
drpass {
	restart "restat";
	die "mati";
};

/* The log block defines what should be logged and to what file.
 * See also https://www.unrealircd.org/docs/Log_block
 */

/* This is a good default, it logs almost everything */
log "ircd.log" {
	flags {
		oper;
		connects;
		server-connects;
		kills;
		errors;
		sadmin-commands;
		chg-commands;
		oper-override;
		tkl;
		spamfilter;
	};
	maxsize 10M;
};

/* With "aliases" you can create an alias like /SOMETHING to send a message to
 * some user or bot. They are usually used for services.
 *
 * We have a number of pre-set alias files, check out the alias/ directory.
 * As an example, here we include all aliases used for anope services.
 */
include "aliases/atheme.conf";

/* Ban nick names so they cannot be used by regular users */
ban nick {
	mask "*C*h*a*n*S*e*r*v*";
	reason "Reserved for Services";
};
ban nick {
	mask "*N*i*c*k*S*e*r*v*";
	reason "Reserved for Services";
};
ban nick {
	mask "*Serv*";
	reason "Reserved for Services";
};

#ban nick {
#	mask "*bot*";
#	reason "No Bot Allowed In This Network";
#};

ban nick { mask "a"; reason "Ahnbergs nick!"; };
ban nick { mask "b"; reason "Due to excessive chasing."; };
ban nick { mask "c"; reason "Cannot be registered."; };
ban nick { mask "d"; reason "Due to chasing."; };
ban nick { mask "e"; reason "Ahnbergs nick!"; };
ban nick { mask "f"; reason "Due to excessive chasing."; };
ban nick { mask "g"; reason "Cannot be registered."; };
ban nick { mask "h"; reason "Ahnbergs nick!"; };
ban nick { mask "i"; reason "Due to chasing."; };
ban nick { mask "j"; reason "Due to excessive chasing."; };
ban nick { mask "k"; reason "Cannot be registered."; };
ban nick { mask "l"; reason "Ahnbergs nick!"; };
#ban nick { mask "m"; reason "Due to chasing."; };
ban nick { mask "n"; reason "Ahnbergs nick!"; };
ban nick { mask "o"; reason "Due to excessive chasing."; };
ban nick { mask "p"; reason "Cannot be registered."; };
ban nick { mask "q"; reason "Ahnbergs nick!"; };
ban nick { mask "r"; reason "Due to chasing."; };
ban nick { mask "s"; reason "Cannot be registered."; };
ban nick { mask "t"; reason "Due to excessive chasing."; };
ban nick { mask "u"; reason "Ahnbergs nick!"; };
ban nick { mask "v"; reason "Due to excessive chasing."; };
#ban nick { mask "w"; reason "Reserved for Undernet."; };
ban nick { mask "x"; reason "Reserved for Undernet."; };
ban nick { mask "y"; reason "Ahnbergs nick!"; };
ban nick { mask "z"; reason "Cannot be registered."; };

/* Ban ip.
 * Note that you normally use /KLINE, /GLINE and /ZLINE for this.
 */
ban ip {
	mask 195.86.232.81;
	reason "Hate you";
};

/* Ban server - if we see this server linked to someone then we delink */
ban server {
	mask eris.berkeley.edu;
	reason "Get out of here.";
};

/* Ban user - just as an example, you normally use /KLINE or /GLINE for this */
ban user {
	mask *tirc@*.saturn.bbn.com;
	reason "Idiot";
};

/* Ban realname allows you to ban clients based on their 'real name'
 * or 'gecos' field.
 */
ban realname {
	mask "Swat Team";
	reason "mIRKFORCE";
};

ban realname {
	mask "sub7server";
	reason "sub7";
};

/* Ban and TKL exceptions. Allows you to exempt users / machines from
 * KLINE, GLINE, etc.
 * If you are an IRCOp with a static IP (and no untrusted persons on that IP)
 * then we suggest you add yourself here. That way you can always get in
 * even if you accidentally place a *LINE ban on yourself.
 */

/* except ban protects you from KLINE and ZLINE */
except ban {
	mask *@192.0.2.1;
	// you may add more mask entries here..
};

/* except tkl with type 'all' protects you from GLINE, GZLINE, QLINE, SHUN */
except tkl {
	mask *@192.0.2.1;
	type all;
};

/* With deny dcc blocks you can ban filenames for DCC */
deny dcc {
	filename "*sub7*";
	reason "Possible Sub7 Virus";
};

/* deny channel allows you to ban a channel (mask) entirely */
deny channel {
	channel "*warez*";
	reason "Warez is illegal";
	class "clients";
};
deny channel {
	channel "#operhelp";
	reason "Our network help channel is #help, not #operhelp";
	redirect "#help";
};
deny channel {
	channel "#services";
	reason "Restricted channel.";
	redirect "#help";
};
deny channel {
	channel "#opers";
	reason "Reserved to prevent abuse.";
	redirect "#help";
};
/* Allow #help */
allow channel {
	channel "#help";
};

official-channels {
	"#Help" { topic "The Official WNet Help Channel, If Nobody Is Present Type /helpop Helpme"; };
	"#WNet" { topic "Welcome To The #WNet Our Main Channel"; };
};

/* VHosts (Virtual Hosts) allow users to acquire a different host.
 * See https://www.unrealircd.org/docs/Vhost_block
 */

/* Example vhost which you can use. On IRC type: /VHOST test test
 * NOTE: only people with an 'unrealircd.com' host may use it so
 *       be sure to change the vhost::mask before you test.
 */
vhost {
	vhost i.hate.microsefrs.com;
	mask *@*;
	login "test";
	password "testlol";
};

/* You can include other configuration files */
/* include "klines.conf"; */

/* Network configuration */
set {
	network-name 		"WNet";
	default-server 		"irc.wnet.my.id";
	services-server 	"WNet.";
	stats-server 		"Stats.";
	help-channel 		"#Help";
	hiddenhost-prefix	"WNet";
	prefix-quit 		"Quit";
	modes-on-join		"+nt";
	auto-join "#WNet";
	sasl-server "squits";

	/* Cloak keys should be the same at all servers on the network.
	 * They are used for generating masked hosts and should be kept secret.
	 * The keys should be 3 random strings of 50-100 characters
	 * and must consist of lowcase (a-z), upcase (A-Z) and digits (0-9).
	 * HINT: On *NIX, you can run './unrealircd gencloak' in your shell to let
	 *       UnrealIRCd generate 3 random strings for you.
	 */
	cloak-keys {
		"wh4v0u3dcu8oaRPyxctq3OmdYdrx03E75xAE";
		"qjMkKA6sM0HNF3olbT3OTfa63AAM48hk5O5FNjX6mab";
		"5srNXEKuPP6apj7HuAxry8045m13oKJ1P3dmbkMi5jhd";
	};
};

/* Server specific configuration */

set {
	kline-address "kline@wnet.my.id"; /* e-mail or URL shown when a user is banned */
	modes-on-connect "+ixw"; /* when users connect, they will get these user modes */
	modes-on-oper	 "+xwgs"; /* when someone becomes IRCOp they'll get these modes */
	#oper-auto-join "#opers"; /* IRCOps are auto-joined to this channel */
	options {
		hide-ulines; /* hide U-lines in /MAP and /LINKS */
		show-connect-info; /* show "looking up your hostname" messages on connect */
		identd-check;
	};

	maxchannelsperuser 20; /* maximum number of channels a user may /JOIN */

	/* The minimum time a user must be connected before being allowed to
	 * use a QUIT message. This will hopefully help stop spam.
	 */
	anti-spam-quit-message-time 60s;

	/* Or simply set a static quit, meaning any /QUIT reason is ignored */
	/* static-quit "Client quit";	*/

	/* static-part does the same for /PART */
	/* static-part yes; */

	/* Which /STATS to restrict to opers only. We suggest to leave it to * (ALL) */
	oper-only-stats "*";

	/* Anti flood protection */
	anti-flood {
		nick-flood 3:60;	/* 3 nick changes per 60 seconds (the default) */
		connect-flood 3:60; /* 3 connection attempts per 60 seconds (the default) */
		away-flood 4:120;	/* 4 times per 2 minutes you may use /AWAY (default) */
	};

	/* Settings for spam filter */
	spamfilter {
		ban-time 1d; /* default duration of a *LINE ban set by spamfilter */
		ban-reason "Spam/Advertising"; /* default reason */
		virus-help-channel "#help"; /* channel to use for 'viruschan' action */
		/* except "#help"; channel to exempt from Spamfilter */
	};
};


blacklist efnetrbl {
       dns {
                name rbl.efnetrbl.org;
                type record;
                reply { 1; 4; 5; };
        };
        action gline;
        ban-time 24h;
        reason "Proxy/Drone/TOR detected. Check http://rbl.efnetrbl.org/?i=$ip for details.";
};

blacklist dronebl {
        dns {
                name dnsbl.dronebl.org;
                type record;
                reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; };
        };
        action gline;
        ban-time 24h;
        reason "Proxy/Drone detected. Check https://dronebl.org/lookup?ip=$ip for details.";
};

webirc {
        mask 109.169.31.4; /* ip or host mask */
        type webirc; /* optional, webirc is the default */
        password passtheword;
};

webirc {
        mask 107.161.19.53; /* ip or host mask */
        type webirc; /* optional, webirc is the default */
        password passtheword;
};

webirc {
        mask 107.161.19.109; /* ip or host mask */
        type webirc; /* optional, webirc is the default */
        password passtheword;
};


/* Finally, you may wish to have a MOTD (Message of the Day), this can be
 * done by creating an 'ircd.motd' text file in your conf/ directory.
 * This file will be shown to your users on connect.
 * For more information see https://www.unrealircd.org/docs/MOTD_and_Rules
 */

/*
 * Problems or need more help?
 * 1) https://www.unrealircd.org/docs/UnrealIRCd_4_documentation
 * 2) https://www.unrealircd.org/docs/FAQ <- answers 80% of your questions!
 * 3) If you are still having problems then you can get support:
 *    - Forums: https://forums.unrealircd.org/
 *    - IRC: irc.unrealircd.org (SSL on port 6697) / #unreal-support
 *    Note that we require you to read the documentation and FAQ first!
 */