API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 27th, 2015
185
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 27.08 KB | None | 0 0
raw download clone embed print report
  1. # ircd-hybrid configuration file [ircd.conf]
  2. # customized for Debian by Joshua Kwan <joshk@triplehelix.org>
  3. # modified for Debian by Aurélien GÉRÔME <ag@roxor.cx>
  4.  
  5. /* serverinfo {}: Contains information about the server. (OLD M:) */
  6. serverinfo {
  7. /* name: the name of our server */
  8. name = "netsoc.co";
  9.  
  10. /* description: the description of our server. '[' and ']' may not
  11. * be used here for compatibility with older servers.
  12. */
  13. description = "netsoc.co";
  14.  
  15. /* network info: the name and description of the network this server
  16. * is on. Shown in the 005 reply and used with serverhiding.
  17. */
  18. network_name = "uccnetsoc";
  19. network_desc = "UCC Netsoc";
  20.  
  21. /* hub: allow this server to act as a hub and have multiple servers
  22. * connected to it. This may not be changed if there are active
  23. * LazyLink servers.
  24. */
  25. hub = yes;
  26.  
  27. /* vhost: the IP to bind to when we connect outward to ipv4 servers.
  28. * This should be an ipv4 IP only.
  29. */
  30. vhost = "84.39.234.50";
  31.  
  32. /* vhost6: the IP to bind to when we connect outward to ipv6 servers.
  33. * This should be an ipv6 IP only.
  34. */
  35. #vhost6 = "3ffe:80e8:546::2";
  36.  
  37. /* max clients: the maximum number of clients allowed to connect */
  38. max_clients = 512;
  39.  
  40. /* postinst of this package already made this key for you */
  41. rsa_private_key_file = "/etc/ircd-hybrid/key/ircd.key";
  42.  
  43. /* postinst of this package already made this certificate for you */
  44. ssl_certificate_file = "/etc/ircd-hybrid/key/ircd.pem";
  45. };
  46.  
  47. connect {
  48. name = "irc.redbrick.dcu.ie";
  49. host = "136.206.15.52";
  50. port = 6667;
  51. hub_mask = "*";
  52. autoconn = no;
  53. class = "servers";
  54. cryptlink = yes;
  55. rsa_public_key_file = "/etc/ircd-hybrid/key/dcu.pub";
  56. };
  57.  
  58. connect {
  59. name = "irc.skynet.ie";
  60. ## host = "irc.skynet.ie";
  61. host = "193.1.99.82";
  62. port = 6667;
  63. hub_mask = "*";
  64. autoconn = no;
  65. class = "servers";
  66. cryptlink = yes;
  67. rsa_public_key_file = "/etc/ircd-hybrid/key/skynet.pub";
  68. };
  69.  
  70. connect {
  71. name = "irc.it-netsoc.ie";
  72. ## host = "irc.it-netsoc.ie";
  73. host = "193.1.123.152";
  74. port = 6667;
  75. hub_mask = "*";
  76. autoconn = no;
  77. class = "servers";
  78. cryptlink = yes;
  79. rsa_public_key_file = "/etc/ircd-hybrid/key/itt.pub";
  80. };
  81.  
  82. connect {
  83. name = "irc2.netsoc.tcd.ie";
  84. ## host = "matrix.netsoc.tcd.ie";
  85. ##host = "134.226.83.25";
  86. host = "134.226.83.61";
  87. port = 6667;
  88. hub_mask = "*";
  89. autoconn=no;
  90. class="servers";
  91. cryptlink=yes;
  92. rsa_public_key_file = "/etc/ircd-hybrid/key/netsoc-tcd.pub";
  93. };
  94.  
  95. connect {
  96. name = "irc.netsoc.dit.ie";
  97. ## host = "irc.netsoc.dit.ie";
  98. host = "147.252.127.67";
  99. port = 6667;
  100. hub_mask = "*";
  101. autoconn=no;
  102. class="servers";
  103. cryptlink=yes;
  104. rsa_public_key_file = "/etc/ircd-hybrid/key/netsoc-dit.pub";
  105. };
  106.  
  107. /* admin {}: contains admin information about the server. (OLD A:) */
  108. admin {
  109. name = "Matt Carrick";
  110. description = "Main Server Administrator";
  111. email = "matt@netsoc.co";
  112. };
  113.  
  114. /*
  115. * log {}: contains information about logfiles.
  116. */
  117. log {
  118. /* Do you want to enable logging to ircd.log? */
  119. use_logging = yes;
  120.  
  121. /*
  122. * logfiles: the logfiles to use for user connects, /oper uses,
  123. * and failed /oper. These files must exist for logging to be used.
  124. */
  125. fname_userlog = "logs/userlog";
  126. fname_operlog = "logs/operlog";
  127. fname_killlog = "logs/kill";
  128. fname_klinelog = "logs/kline";
  129. fname_glinelog = "logs/gline";
  130.  
  131. /*
  132. * log_level: the amount of detail to log in ircd.log. The
  133. * higher, the more information is logged. May be changed
  134. * once the server is running via /quote SET LOG. Either:
  135. * L_CRIT, L_ERROR, L_WARN, L_NOTICE, L_TRACE, L_INFO or L_DEBUG
  136. */
  137. log_level = L_INFO;
  138. };
  139.  
  140. /* class {}: contain information about classes for users (OLD Y:) */
  141. class {
  142. /* name: the name of the class. classes are text now */
  143. name = "users";
  144.  
  145. /* ping time: how often a client must reply to a PING from the
  146. * server before they are dropped.
  147. */
  148. ping_time = 2 minutes;
  149.  
  150. /* number per ip: the number of users per host allowed to connect */
  151. number_per_ip = 2;
  152.  
  153. /* max number: the maximum number of users allowed in this class */
  154. max_number = 100;
  155.  
  156. /* sendq: the amount of data allowed in a clients queue before
  157. * they are dropped.
  158. */
  159. sendq = 100 kbytes;
  160. };
  161.  
  162. class {
  163. name = "restricted";
  164. ping_time = 1 minute 30 seconds;
  165. number_per_ip = 1;
  166. max_number = 100;
  167. sendq = 60kb;
  168. };
  169.  
  170. class {
  171. name = "opers";
  172. ping_time = 5 minutes;
  173. number_per_ip = 10;
  174. max_number = 100;
  175. sendq = 100kbytes;
  176. };
  177.  
  178. class {
  179. name = "server";
  180. ping_time = 5 minutes;
  181.  
  182. /* connectfreq: only used in server classes. specifies the delay
  183. * between autoconnecting to servers.
  184. */
  185. connectfreq = 5 minutes;
  186.  
  187. /* max number: the amount of servers to autoconnect to */
  188. max_number = 1;
  189.  
  190. /* sendq: servers need a higher sendq as they send more data */
  191. sendq=2 megabytes;
  192. };
  193.  
  194. /* listen {}: contain information about the ports ircd listens on (OLD P:) */
  195. listen {
  196. /* port: the specific port to listen on. if no host is specified
  197. * before, it will listen on all available IPs.
  198. *
  199. * ports are seperated via a comma, a range may be specified using ".."
  200. */
  201.  
  202. /* port: listen on all available IPs, ports 6665 to 6669 */
  203. host = "84.39.234.50"; # change this!
  204. port = 6665 .. 6669;
  205.  
  206. /* sslport: ports to accept ONLY ssl connections on */
  207. flags = ssl;
  208. port = 6670;
  209. };
  210.  
  211. /* auth {}: allow users to connect to the ircd (OLD I:) */
  212. auth {
  213. /* user: the user@host allowed to connect. multiple IPv4/IPv6 user
  214. * lines are permitted per auth block.
  215. */
  216. user = "*@127.0.0.1";
  217.  
  218. /* password: an optional password that is required to use this block */
  219.  
  220. /* spoof: fake the users host to be be this. This is free-form,
  221. * just do everyone a favour and dont abuse it. (OLD I: = flag)
  222. */
  223. spoof = "i.love.debian.org";
  224.  
  225. /* spoof notice: enable spoofing notification to admins (default yes) */
  226. spoof_notice = yes;
  227.  
  228. /* exceed limit: allow a user to exceed class limits (OLD I: > flag) */
  229. exceed_limit = yes;
  230.  
  231. /* kline exempt: exempt this user from k/glines (OLD I: ^ flag) */
  232. kline_exempt = yes;
  233.  
  234. /* gline exempt: exempt this user from glines (OLD I: _ flag) */
  235. gline_exempt = yes;
  236.  
  237. /* no tilde: remove ~ from a user with no ident (OLD I: - flag) */
  238. no_tilde = yes;
  239.  
  240. /* class: the class the user is placed in */
  241. class = "opers";
  242. };
  243.  
  244. #auth {
  245. # # redirect: the server and port to redirect a user to. A user does
  246. # # not have to obey the redirection, the ircd just suggests to them
  247. # # an alternative server.
  248. # redirserv = "irc.at.the.edge.of.earth";
  249. # redirport = 6667;
  250.  
  251. # /* hostmask user has to match to receive redirection */
  252. # user = "*.on.mars";
  253. #
  254. # /* class: a class is required even though it is not used */
  255. # class = "users";
  256. #};
  257.  
  258. auth {
  259. user = "*@*";
  260. class = "users";
  261.  
  262. /* restricted: stop the client sending mode changes */
  263. #restricted = yes;
  264.  
  265. /* have ident: require the user has identd to connect (OLD I: + flag) */
  266. have_ident = no;
  267. };
  268.  
  269. /* operator {}: defines ircd operators. (OLD O:)
  270. * ircd-hybrid no longer supports local operators, privileges are
  271. * controlled via flags.
  272. */
  273. operator {
  274. /* name: the name of the oper */
  275. name = "root";
  276.  
  277. /* user: the user@host required for this operator. CIDR is not
  278. * supported. multiple user="" lines are supported.
  279. */
  280. user = "root@127.0.0.1";
  281.  
  282. /* password: the password required to oper. By default this will
  283. * need to be encrypted using '/usr/bin/mkpasswd'.
  284. * WARNING: Please do not mix up the 'mkpasswd' program from
  285. * /usr/sbin with this one. If you are root, typing 'mkpasswd'
  286. * will run that one instead and you will receive a strange error.
  287. *
  288. * MD5 is supported. If you want to use it, use mkpasswd -Hmd5.
  289. */
  290. password = "ToJx.IEPqjiVg";
  291. #password = "$1$9PTzrFkW$yh3ablZ5DnHeU9yjhj..U/";
  292.  
  293. /* rsa key: the public key for this oper when using Challenge.
  294. * A password should not be defined when this is used, see
  295. * doc/challenge.txt for more information.
  296. */
  297. #rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
  298.  
  299. /* class: the class the oper joins when they successfully /oper */
  300. class = "opers";
  301.  
  302. /* privileges: controls the activities and commands an oper are
  303. * allowed to do on the server. All options default to no.
  304. * Available options:
  305. *
  306. * global_kill: allows remote users to be /KILL'd (OLD 'O' flag)
  307. * remote: allows remote SQUIT and CONNECT (OLD 'R' flag)
  308. * kline: allows KILL, KLINE and DLINE (OLD 'K' flag)
  309. * unkline: allows UNKLINE and UNDLINE (OLD 'U' flag)
  310. * gline: allows GLINE (OLD 'G' flag)
  311. * nick_changes: allows oper to see nickchanges (OLD 'N' flag)
  312. * via usermode +n
  313. * rehash: allows oper to REHASH config (OLD 'H' flag)
  314. * die: allows DIE and RESTART (OLD 'D' flag)
  315. * admin: gives admin privileges. admins
  316. * may (un)load modules and see the
  317. * real IPs of servers.
  318. */
  319. global_kill = yes;
  320. remote = yes;
  321. kline = yes;
  322. unkline = yes;
  323. gline = yes;
  324. die = yes;
  325. rehash = yes;
  326. nick_changes = yes;
  327. admin = yes;
  328. };
  329.  
  330. operator {
  331. password = "kXKr4EJMaCpiE";
  332. name = "thejokersthief";
  333. class = "opers";
  334.  
  335. global_kill = yes;
  336. remote = yes;
  337. kline = yes;
  338. unkline = yes;
  339. gline = yes;
  340. die = yes;
  341. rehash = yes;
  342. nick_changes = yes;
  343. admin = yes;
  344. };
  345.  
  346. operator {
  347. password = "Gti1VPBtSb/XU";
  348. name = "ovrplyd";
  349. class = "opers";
  350.  
  351. global_kill = yes;
  352. remote = yes;
  353. kline = yes;
  354. unkline = yes;
  355. gline = yes;
  356. die = yes;
  357. rehash = yes;
  358. nick_changes = yes;
  359. admin = yes;
  360. };
  361.  
  362. /* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
  363.  
  364. #connect {
  365. # /* name: the name of the server */
  366. # name = "irc.example.net";
  367. #
  368. # /* host: the host or IP to connect to. If a hostname is used it
  369. # * must match the reverse dns of the server.
  370. # */
  371. # host = "192.168.0.1";
  372. #
  373. # /* passwords: the passwords we send (OLD C:) and accept (OLD N:).
  374. # * The remote server will have these passwords reversed.
  375. # */
  376. # send_password = "password";
  377. # accept_password = "anotherpassword";
  378. #
  379. # /* encrypted: controls whether the accept_password above has been
  380. # * encrypted. (OLD CRYPT_LINK_PASSWORD now optional per connect)
  381. # */
  382. # encrypted = no;
  383. #
  384. # /* port: the port to connect to this server on */
  385. # port = 6666;
  386. #
  387. # /* hub mask: the mask of servers that this server may hub. Multiple
  388. # * entries are permitted
  389. # */
  390. # hub_mask = "*";
  391. #
  392. # /* leaf mask: the mask of servers this server may not hub. Multiple
  393. # * entries are permitted. Useful for forbidding EU -> US -> EU routes.
  394. # */
  395. # #leaf_mask = "*.uk";
  396. #
  397. # /* class: the class this server is in */
  398. # class = "server";
  399. #
  400. # /* autoconnect: controls whether we autoconnect to this server or not,
  401. # * dependent on class limits.
  402. # */
  403. # autoconn = no;
  404. #
  405. # /* compressed: controls whether traffic is compressed via ziplinks.
  406. # * By default this is disabled
  407. # */
  408. # #compressed = yes;
  409. #
  410. # /* lazylink: controls whether this server is a LazyLink. LazyLink
  411. # * servers may NOT hub. see doc/LazyLinks.as.implemented.txt
  412. # */
  413. # #lazylink = yes;
  414. #
  415. # /* masking: the servername we pretend to be when we connect */
  416. # #fakename = "*.arpa";
  417. #};
  418.  
  419. /* This build of ircd-hybrid *does* support cryptlinks, so an example
  420. * is provided below. */
  421.  
  422. #connect {
  423. # name = "encrypted.auth.example";
  424. # host = "some.host.somewhere";
  425. # port = 6667;
  426. #
  427. # /* cryptlink: enable full encryption for all data passing between our
  428. # * server and this link and rsa authentication.
  429. # */
  430. # cryptlink = yes;
  431. #
  432. # /* rsa key: the path to the public keyfile of the server. Used instead
  433. # * of passwords.
  434. # */
  435. # rsa_public_key_file = "/etc/ircd-hybrid/key/remote.pub";
  436. #
  437. # /* cipher preference: set the preferred cipher for this link
  438. # *
  439. # * Available ciphers are:
  440. # * BF/256 BF/128 CAST/128 IDEA/128 RC5.16/128
  441. # * RC5.12/128 RC5.8/128 3DES/168 DES/56
  442. # *
  443. # * NOTE: Some ciphers may not be supported by your OpenSSL.
  444. # * Check the output from 'configure' for available ciphers.
  445. # *
  446. # * NOTE2: To help you decide what cipher to use, tools/encspeed
  447. # * will show you approximately how fast each cipher is.
  448. # * However, blowfish is fast and secure, and is probably
  449. # * a good default for most situations.
  450. # *
  451. # * NOTE3: Default if none is set is BF/128
  452. # *
  453. # * The cipher *MUST* be the same in both directions. If you
  454. # * set a cipher preference, your uplink must set the same cipher,
  455. # * else it will not link.
  456. # */
  457. # #cipher_preference = "BF/256";
  458. #};
  459.  
  460. #connect {
  461. # name = "ipv6.some.server";
  462. # host = "3ffd:dead:beef::1";
  463. # send_password = "password";
  464. # accept_password = "password";
  465. # port = 6666;
  466. #
  467. # /* aftype: controls whether the connection uses "ipv4" or "ipv6".
  468. # * Default is ipv4. */
  469. # aftype = ipv6;
  470. # class = "server";
  471. #};
  472.  
  473. /* shared {}: users that are allowed to remote kline (OLD U:) */
  474. shared {
  475. /* name: the server the user must be on to set klines. If this is not
  476. * specified, the user will be allowed to kline from all servers.
  477. */
  478. name = "hybrid7.debian.local";
  479.  
  480. /* user: the user@host mask that is allowed to set klines. If this is
  481. * not specified, all users on the server above will be allowed to set
  482. * a remote kline.
  483. */
  484. user = "root@localhost";
  485. };
  486.  
  487. /* kill {}: users that are not allowed to connect (OLD K:)
  488. * Oper issued klines will be added to the specified kline config
  489. */
  490. #kill {
  491. # user = "bad@*.hacked.edu";
  492. # reason = "Obviously hacked account";
  493. #};
  494.  
  495. /* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
  496. * Oper issued dlines will be added to the specified dline config
  497. */
  498. deny {
  499. ip = "10.0.1.0/24";
  500. reason = "Reconnecting vhosted bots";
  501. };
  502.  
  503. /* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) */
  504. exempt {
  505. ip = "192.168.0.0/16";
  506. };
  507.  
  508. /* resv {}: nicks and channels users may not use/join (OLD Q:) */
  509. resv {
  510. /* reason: the reason for the proceeding resv's */
  511. reason = "There are no services on this network";
  512.  
  513. /* resv: the nicks and channels users may not join/use */
  514. nick = "nickserv";
  515. nick = "chanserv";
  516. channel = "#services";
  517.  
  518. /* resv: wildcard masks are also supported in nicks only */
  519. reason = "Clone bots";
  520. nick = "clone*";
  521. };
  522.  
  523. /* gecos {}: The X: replacement, used for banning users based on their
  524. * "realname". The action may be either:
  525. * warn: allow client to connect, but send message to opers
  526. * reject: drop clients but also send message to opers.
  527. * silent: silently drop clients who match.
  528. */
  529. #gecos {
  530. # name = "*sex*";
  531. # reason = "Possible spambot";
  532. # action = warn;
  533. #};
  534.  
  535. #gecos {
  536. # name = "sub7server";
  537. # reason = "Trojan drone";
  538. # action = reject;
  539. #};
  540.  
  541. #gecos {
  542. # name = "*http*";
  543. # reason = "Spambot";
  544. # action = silent;
  545. #};
  546.  
  547. /* The channel block contains options pertaining to channels */
  548. channel {
  549. /* invex: Enable/disable channel mode +I, a n!u@h list of masks
  550. * that can join a +i channel without an invite.
  551. */
  552. use_invex = yes;
  553.  
  554. /* except: Enable/disable channel mode +e, a n!u@h list of masks
  555. * that can join a channel through a ban (+b).
  556. */
  557. use_except = yes;
  558.  
  559. /* knock: Allows users to request an invite to a channel that
  560. * is locked somehow (+ikl). If the channel is +p or you are banned
  561. * the knock will not be sent.
  562. */
  563. use_knock = yes;
  564.  
  565. /* knock delay: The amount of time a user must wait between issuing
  566. * the knock command.
  567. */
  568. knock_delay = 5 minutes;
  569.  
  570. /* knock channel delay: How often a knock to any specific channel
  571. * is permitted, regardless of the user sending the knock.
  572. */
  573. knock_delay_channel = 1 minute;
  574.  
  575. /* max chans: The maximum number of channels a user can join/be on. */
  576. max_chans_per_user = 15;
  577.  
  578. /* quiet on ban: stop banned people talking in channels. */
  579. quiet_on_ban = yes;
  580.  
  581. /* max bans: maximum number of +b/e/I modes in a channel */
  582. max_bans = 25;
  583.  
  584. /* splitcode: the ircd will check every 60s as to whether splitmode
  585. * should be disabled or not, so there may be a delay between a
  586. * netsplit ending and splitmode ending.
  587. *
  588. * both split users and split servers must be true to enter splitmode
  589. *
  590. * you may force splitmode to be permanent by /quote set splitmode on
  591. */
  592.  
  593. /* split users: when the usercount is lower than this level, consider
  594. * ourselves split. this must be set for automatic splitmode
  595. */
  596. default_split_user_count = 0;
  597.  
  598. /* split servers: when the servercount is lower than this, consider
  599. * ourselves split. this must be set for automatic splitmode
  600. */
  601. default_split_server_count = 0;
  602.  
  603. /* split no create: disallow users creating channels on split. */
  604. no_create_on_split = no;
  605.  
  606. /* split: no join: disallow users joining channels at all on a split */
  607. no_join_on_split = no;
  608.  
  609. /* disable local channels: prevent users from joining &channels.
  610. * This is extreme, but it is still a flaw in serverhide. It will
  611. * however remove far more from users than it will give back in
  612. * security.
  613. */
  614. disable_local_channels = no;
  615. };
  616.  
  617.  
  618. /* The serverhide block contains the options regarding serverhiding */
  619. serverhide {
  620. /* flatten links: this option will show all servers in /links appear
  621. * that they are linked to this current server
  622. */
  623. flatten_links = no;
  624.  
  625. /* links delay: how often to update the links file when it is
  626. * flattened.
  627. */
  628. links_delay = 5 minutes;
  629.  
  630. /* hidden: hide this server from a /links output on servers that
  631. * support it. this allows hub servers to be hidden etc.
  632. */
  633. hidden = no;
  634.  
  635. /* disable hidden: prevent servers hiding themselves from a
  636. * /links ouput.
  637. */
  638. disable_hidden = no;
  639.  
  640. /* hide servers: hide remote servernames everywhere and instead use
  641. * network_name and network_desc.
  642. */
  643. hide_servers = no;
  644. };
  645.  
  646. /* The general block contains many of the options that were once compiled
  647. * in options in config.h. The general block is read at start time.
  648. */
  649. general {
  650. /* oper pass resv: allow opers to over-ride RESVs on nicks/channels */
  651. oper_pass_resv = yes;
  652.  
  653. /* disable remote: disable users doing commands on remote servers */
  654. disable_remote_commands = no;
  655.  
  656. /* floodcount: the default value of floodcount that is configurable
  657. * via /quote set floodcount. This is the amount of lines a user
  658. * may send to any other user/channel in one second.
  659. */
  660. default_floodcount = 10;
  661.  
  662. /* failed oper notice: send a notice to all opers on the server when
  663. * someone tries to OPER and uses the wrong password, host or ident.
  664. */
  665. failed_oper_notice = yes;
  666.  
  667. /* dots in ident: the amount of '.' characters permitted in an ident
  668. * reply before the user is rejected.
  669. */
  670. dots_in_ident=2;
  671.  
  672. /* dot in ipv6: ircd-hybrid-6.0 and earlier will disallow hosts
  673. * without a '.' in them. this will add one to the end. only needed
  674. * for older servers.
  675. */
  676. dot_in_ip6_addr = yes;
  677.  
  678. /* min nonwildcard: the minimum non wildcard characters in k/d/g lines
  679. * placed via the server. klines hand placed are exempt from limits.
  680. * wildcard chars: '.' '*' '?' '@'
  681. */
  682. min_nonwildcard = 4;
  683.  
  684. /* max accept: maximum allowed /accept's for +g usermode */
  685. max_accept = 20;
  686.  
  687. /* nick flood: enable the nickflood control code */
  688. anti_nick_flood = yes;
  689.  
  690. /* nick flood: the nick changes allowed in the specified period */
  691. max_nick_time = 20 seconds;
  692. max_nick_changes = 5;
  693.  
  694. /* anti spam time: the minimum time a user must be connected before
  695. * custom quit messages are allowed.
  696. *
  697. * The upstream default is 2 minutes.
  698. */
  699. anti_spam_exit_message_time = 0 minutes;
  700.  
  701. /* ts delta: the time delta allowed between server clocks before
  702. * a warning is given, or before the link is dropped. all servers
  703. * should run ntpdate/rdate to keep clocks in sync
  704. */
  705. ts_warn_delta = 30 seconds;
  706. ts_max_delta = 5 minutes;
  707.  
  708. /* kline reason: show the user the reason why they are k/d/glined
  709. * on exit. may give away who set k/dline when set via tcm.
  710. */
  711. kline_with_reason = yes;
  712.  
  713. /* kline connection closed: make the users quit message on channels
  714. * to be "Connection closed", instead of the kline reason.
  715. */
  716. # kline_with_connection_closed = no;
  717.  
  718. /* warn no nline: warn opers about servers that try to connect but
  719. * we dont have a connect {} block for. Twits with misconfigured
  720. * servers can get really annoying with this enabled.
  721. */
  722. warn_no_nline = yes;
  723.  
  724. /* stats o oper only: make stats o (opers) oper only */
  725. stats_o_oper_only=yes;
  726.  
  727. /* stats P oper only: make stats P (ports) oper only */
  728. stats_P_oper_only=no;
  729.  
  730. /* stats i oper only: make stats i (auth {}) oper only. set to:
  731. * yes: show users no auth blocks, made oper only.
  732. * masked: show users first matching auth block
  733. * no: show users all auth blocks.
  734. */
  735. stats_i_oper_only=masked;
  736.  
  737. /* stats k/K oper only: make stats k/K (klines) oper only. set to:
  738. * yes: show users no auth blocks, made oper only
  739. * masked: show users first matching auth block
  740. * no: show users all auth blocks.
  741. */
  742. stats_k_oper_only=masked;
  743.  
  744. /* caller id wait: time between notifying a +g user that somebody
  745. * is messaging them.
  746. */
  747. caller_id_wait = 1 minute;
  748.  
  749. /* pace wait simple: time between use of less intensive commands
  750. * (HELP, remote WHOIS, WHOWAS)
  751. */
  752. pace_wait_simple = 1 second;
  753.  
  754. /* pace wait: time between more intensive commands
  755. * (ADMIN, INFO, LIST, LUSERS, MOTD, STATS, VERSION)
  756. */
  757. pace_wait = 10 seconds;
  758.  
  759. /* short motd: send clients a notice telling them to read the motd
  760. * instead of forcing a motd to clients who may simply ignore it.
  761. */
  762. short_motd = no;
  763.  
  764. /* ping cookies: require clients to respond exactly to a ping command,
  765. * can help block certain types of drones and FTP PASV mode spoofing.
  766. */
  767. ping_cookie = no;
  768.  
  769. /* no oper flood: increase flood limits for opers. */
  770. no_oper_flood = yes;
  771.  
  772. /* true no oper flood: completely eliminate flood limits for opers
  773. * and for clients with can_flood = yes in their auth {} blocks
  774. */
  775. true_no_oper_flood = yes;
  776.  
  777. /* idletime: the maximum amount of time a user may idle before
  778. * they are disconnected
  779. */
  780. idletime = 0;
  781.  
  782. /* REMOVE ME. The following line checks you've been reading. */
  783. # havent_read_conf = 1;
  784.  
  785. /* max targets: the maximum amount of targets in a single
  786. * PRIVMSG/NOTICE. set to 999 NOT 0 for unlimited.
  787. */
  788. max_targets = 4;
  789.  
  790. /* client flood: maximum number of lines in a clients queue before
  791. * they are dropped for flooding.
  792. */
  793. client_flood = 20;
  794.  
  795. /* message locale: the default message locale if gettext() is enabled
  796. * and working.
  797. * Use "custom" for the (in)famous Hybrid custom messages.
  798. * Use "standard" for the compiled in defaults.
  799. */
  800. message_locale = "standard";
  801.  
  802. /* usermodes configurable: a list of usermodes for the options below
  803. *
  804. * +b - bots - See bot and drone flooding notices
  805. * +c - cconn - Client connection/quit notices
  806. * +d - debug - See debugging notices
  807. * +f - full - See I: line full notices
  808. * +g - callerid - Server Side Ignore
  809. * +i - invisible - Not shown in NAMES or WHO unless you share a
  810. * a channel
  811. * +k - skill - See server generated KILL messages
  812. * +l - locops - See LOCOPS messages
  813. * +n - nchange - See client nick changes
  814. * +r - rej - See rejected client notices
  815. * +s - servnotice - See general server notices
  816. * +u - unauth - See unauthorized client notices
  817. * +w - wallop - See server generated WALLOPS
  818. * +x - external - See remote server connection and split notices
  819. * +y - spy - See LINKS, STATS, TRACE notices etc.
  820. * +z - operwall - See oper generated WALLOPS
  821. */
  822.  
  823. /* oper only umodes: usermodes only opers may set */
  824. oper_only_umodes = bots, cconn, debug, full, skill, nchange,
  825. rej, spy, external, operwall, locops, unauth;
  826.  
  827. /* oper umodes: default usermodes opers get when they /oper */
  828. oper_umodes = locops, servnotice, operwall, wallop;
  829.  
  830. /* servlink path: path to 'servlink' program used by ircd to handle
  831. * encrypted/compressed server <-> server links.
  832. *
  833. * unless you move servlink around (???), you shouldn't define this.
  834. */
  835. #servlink_path = "/usr/lib/ircd-hybrid/servlink";
  836.  
  837. /* default cipher: default cipher to use for cryptlink when none is
  838. * specified in connect block.
  839. */
  840. default_cipher_preference = "BF/168";
  841.  
  842. /* use egd: if your system does not have *random devices yet you
  843. * want to use OpenSSL and encrypted links, enable this. Beware -
  844. * EGD is *very* CPU intensive when gathering data for its pool
  845. */
  846. #use_egd = yes;
  847.  
  848. /* egdpool path: path to EGD pool. Not necessary for OpenSSL >= 0.9.7
  849. * which automatically finds the path.
  850. */
  851. #egdpool_path = "/var/run/egd-pool";
  852.  
  853.  
  854. /* compression level: level of compression for compressed links between
  855. * servers.
  856. *
  857. * values are between: 1 (least compression, fastest)
  858. * and: 9 (most compression, slowest).
  859. */
  860. #compression_level = 6;
  861.  
  862. /* throttle time: the minimum amount of time between connections from
  863. * the same ip. exempt {} blocks are excluded from this throttling.
  864. * Offers protection against flooders who reconnect quickly.
  865. * Set to 0 to disable.
  866. */
  867. throttle_time = 10;
  868. };
  869.  
  870. glines {
  871. /* enable: enable glines, network wide temp klines */
  872. enable = yes;
  873.  
  874. /*
  875. * duration: the amount of time a gline will remain on your
  876. * server before expiring
  877. */
  878. duration = 1 day;
  879.  
  880. /*
  881. * logging: which types of rules you want to log when triggered
  882. * (choose reject or block)
  883. */
  884. logging = reject, block;
  885.  
  886. /*
  887. * NOTE: gline ACLs can cause a desync of glines throughout the
  888. * network, meaning some servers may have a gline triggered, and
  889. * others may not. Also, you only need insert rules for glines
  890. * that you want to block and/or reject. If you want to accept and
  891. * propagate the gline, do NOT put a rule for it.
  892. */
  893.  
  894. /* user@host for rule to apply to */
  895. user = "god@I.still.hate.packets";
  896. /* server for rule to apply to */
  897. name = "hades.arpa";
  898.  
  899. /*
  900. * action: action to take when a matching gline is found. options are:
  901. * reject - do not apply the gline locally
  902. * block - do not propagate the gline
  903. */
  904. action = reject, block;
  905.  
  906. user = "god@*";
  907. name = "*";
  908. action = block;
  909. };
  910.  
  911. modules {
  912. /* module path: paths to search for modules specified below and
  913. * in /modload.
  914. */
  915. path = "/usr/lib/ircd-hybrid/modules";
  916. path = "/usr/lib/ircd-hybrid/modules/autoload";
  917.  
  918. /* module: the name of a module to load on startup/rehash */
  919. module = "m_tburst.so";
  920. };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!