API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 14th, 2017
571
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.04 KB | None | 0 0
raw download clone embed print report
  1. # ircd-hybrid configuration file [ircd.conf]
  2. # customized for Debian by Joshua Kwan <joshk@triplehelix.org>
  3. # modified for Debian by Aurélien GÉRÔME <ag@roxor.cx>
  4.  
  5. /* serverinfo {}: Contains information about the server. (OLD M:) */
  6. serverinfo {
  7. /* name: the name of our server */
  8. name = "botsink";
  9.  
  10. /* description: the description of our server. '[' and ']' may not
  11. * be used here for compatibility with older servers.
  12. */
  13. description = "botsink";
  14.  
  15. /* network info: the name and description of the network this server
  16. * is on. Shown in the 005 reply and used with serverhiding.
  17. */
  18. network_name = "seclab";
  19. network_desc = "I am the seclab RE training fake IRC server";
  20.  
  21. /* hub: allow this server to act as a hub and have multiple servers
  22. * connected to it. This may not be changed if there are active
  23. * LazyLink servers.
  24. */
  25. hub = yes;
  26.  
  27. /* vhost: the IP to bind to when we connect outward to ipv4 servers.
  28. * This should be an ipv4 IP only.
  29. */
  30. #vhost = "192.169.0.1";
  31.  
  32. /* vhost6: the IP to bind to when we connect outward to ipv6 servers.
  33. * This should be an ipv6 IP only.
  34. */
  35. #vhost6 = "3ffe:80e8:546::2";
  36.  
  37. /* max clients: the maximum number of clients allowed to connect */
  38. max_clients = 512;
  39. };
  40.  
  41. /* admin {}: contains admin information about the server. (OLD A:) */
  42. admin {
  43. name = "botmaster";
  44. description = "Botmaster";
  45. email = "<root@localhost>";
  46. };
  47.  
  48. /*
  49. * log {}: contains information about logfiles.
  50. */
  51. log {
  52. /* Do you want to enable logging to ircd.log? */
  53. use_logging = yes;
  54.  
  55. /*
  56. * logfiles: the logfiles to use for user connects, /oper uses,
  57. * and failed /oper. These files must exist for logging to be used.
  58. */
  59. fname_userlog = "logs/userlog";
  60. fname_operlog = "logs/operlog";
  61. fname_killlog = "logs/kill";
  62. fname_klinelog = "logs/kline";
  63. fname_glinelog = "logs/gline";
  64.  
  65. /*
  66. * log_level: the amount of detail to log in ircd.log. The
  67. * higher, the more information is logged. May be changed
  68. * once the server is running via /quote SET LOG. Either:
  69. * L_CRIT, L_ERROR, L_WARN, L_NOTICE, L_TRACE, L_INFO or L_DEBUG
  70. */
  71. log_level = L_INFO;
  72. };
  73.  
  74. /* class {}: contain information about classes for users (OLD Y:) */
  75. class {
  76. /* name: the name of the class. classes are text now */
  77. name = "users";
  78.  
  79. /* ping time: how often a client must reply to a PING from the
  80. * server before they are dropped.
  81. */
  82. ping_time = 2 minutes;
  83.  
  84. /* number per ip: the number of users per host allowed to connect */
  85. number_per_ip = 2;
  86.  
  87. /* max number: the maximum number of users allowed in this class */
  88. max_number = 100;
  89.  
  90. /* sendq: the amount of data allowed in a clients queue before
  91. * they are dropped.
  92. */
  93. sendq = 100 kbytes;
  94. };
  95.  
  96. class {
  97. name = "restricted";
  98. ping_time = 1 minute 30 seconds;
  99. number_per_ip = 1;
  100. max_number = 100;
  101. sendq = 60kb;
  102. };
  103.  
  104. class {
  105. name = "opers";
  106. ping_time = 5 minutes;
  107. number_per_ip = 10;
  108. max_number = 100;
  109. sendq = 100kbytes;
  110. };
  111.  
  112. class {
  113. name = "server";
  114. ping_time = 5 minutes;
  115.  
  116. /* connectfreq: only used in server classes. specifies the delay
  117. * between autoconnecting to servers.
  118. */
  119. connectfreq = 5 minutes;
  120.  
  121. /* max number: the amount of servers to autoconnect to */
  122. max_number = 1;
  123.  
  124. /* sendq: servers need a higher sendq as they send more data */
  125. sendq=2 megabytes;
  126. };
  127.  
  128. /* listen {}: contain information about the ports ircd listens on (OLD P:) */
  129. listen {
  130. /* port: the specific port to listen on. if no host is specified
  131. * before, it will listen on all available IPs.
  132. *
  133. * ports are seperated via a comma, a range may be specified using ".."
  134. */
  135.  
  136. /* port: listen on all available IPs, ports 6665 to 6669 */
  137. # host = "127.0.0.1"; # change this!
  138. host = "0.0.0.0";
  139. port = 6556, 6665 .. 6669, 65146;
  140. };
  141.  
  142. /* auth {}: allow users to connect to the ircd (OLD I:) */
  143. auth {
  144. /* user: the user@host allowed to connect. multiple IPv4/IPv6 user
  145. * lines are permitted per auth block.
  146. */
  147. user = "*@127.0.0.1";
  148.  
  149. /* password: an optional password that is required to use this block */
  150.  
  151. /* spoof: fake the users host to be be this. This is free-form,
  152. * just do everyone a favour and dont abuse it. (OLD I: = flag)
  153. */
  154. spoof = "mindleak.com";
  155.  
  156. /* spoof notice: enable spoofing notification to admins (default yes) */
  157. spoof_notice = yes;
  158.  
  159. /* exceed limit: allow a user to exceed class limits (OLD I: > flag) */
  160. exceed_limit = yes;
  161.  
  162. /* kline exempt: exempt this user from k/glines (OLD I: ^ flag) */
  163. kline_exempt = yes;
  164.  
  165. /* gline exempt: exempt this user from glines (OLD I: _ flag) */
  166. gline_exempt = yes;
  167.  
  168. /* no tilde: remove ~ from a user with no ident (OLD I: - flag) */
  169. no_tilde = yes;
  170.  
  171. /* class: the class the user is placed in */
  172. class = "opers";
  173. };
  174.  
  175. #auth {
  176. # # redirect: the server and port to redirect a user to. A user does
  177. # # not have to obey the redirection, the ircd just suggests to them
  178. # # an alternative server.
  179. # redirserv = "irc.at.the.edge.of.earth";
  180. # redirport = 6667;
  181.  
  182. # /* hostmask user has to match to receive redirection */
  183. # user = "*.on.mars";
  184. #
  185. # /* class: a class is required even though it is not used */
  186. # class = "users";
  187. #};
  188.  
  189. auth {
  190. user = "*@*";
  191. class = "users";
  192.  
  193. /* restricted: stop the client sending mode changes */
  194. #restricted = yes;
  195.  
  196. /* have ident: require the user has identd to connect (OLD I: + flag) */
  197. have_ident = no;
  198. };
  199.  
  200. /* operator {}: defines ircd operators. (OLD O:)
  201. * ircd-hybrid no longer supports local operators, privileges are
  202. * controlled via flags.
  203. */
  204. operator {
  205. /* name: the name of the oper */
  206. name = "root";
  207.  
  208. /* user: the user@host required for this operator. CIDR is not
  209. * supported. multiple user="" lines are supported.
  210. */
  211. user = "root@127.0.0.1";
  212.  
  213. /* password: the password required to oper. By default this will
  214. * need to be encrypted using '/usr/bin/mkpasswd'.
  215. * WARNING: Please do not mix up the 'mkpasswd' program from
  216. * /usr/sbin with this one. If you are root, typing 'mkpasswd'
  217. * will run that one instead and you will receive a strange error.
  218. *
  219. * MD5 is supported. If you want to use it, use mkpasswd -Hmd5.
  220. */
  221. password = "ToJx.IEPqjiVg";
  222. #password = "$1$9PTzrFkW$yh3ablZ5DnHeU9yjhj..U/";
  223.  
  224. /* class: the class the oper joins when they successfully /oper */
  225. class = "opers";
  226.  
  227. /* privileges: controls the activities and commands an oper are
  228. * allowed to do on the server. All options default to no.
  229. * Available options:
  230. *
  231. * global_kill: allows remote users to be /KILL'd (OLD 'O' flag)
  232. * remote: allows remote SQUIT and CONNECT (OLD 'R' flag)
  233. * kline: allows KILL, KLINE and DLINE (OLD 'K' flag)
  234. * unkline: allows UNKLINE and UNDLINE (OLD 'U' flag)
  235. * gline: allows GLINE (OLD 'G' flag)
  236. * nick_changes: allows oper to see nickchanges (OLD 'N' flag)
  237. * via usermode +n
  238. * rehash: allows oper to REHASH config (OLD 'H' flag)
  239. * die: allows DIE and RESTART (OLD 'D' flag)
  240. * admin: gives admin privileges. admins
  241. * may (un)load modules and see the
  242. * real IPs of servers.
  243. */
  244. global_kill = yes;
  245. remote = yes;
  246. kline = yes;
  247. unkline = yes;
  248. gline = yes;
  249. die = yes;
  250. rehash = yes;
  251. nick_changes = yes;
  252. admin = yes;
  253. };
  254.  
  255. /* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
  256.  
  257. #connect {
  258. # /* name: the name of the server */
  259. # name = "irc.example.net";
  260. #
  261. # /* host: the host or IP to connect to. If a hostname is used it
  262. # * must match the reverse dns of the server.
  263. # */
  264. # host = "192.168.0.1";
  265. #
  266. # /* passwords: the passwords we send (OLD C:) and accept (OLD N:).
  267. # * The remote server will have these passwords reversed.
  268. # */
  269. # send_password = "password";
  270. # accept_password = "anotherpassword";
  271. #
  272. # /* encrypted: controls whether the accept_password above has been
  273. # * encrypted. (OLD CRYPT_LINK_PASSWORD now optional per connect)
  274. # */
  275. # encrypted = no;
  276. #
  277. # /* port: the port to connect to this server on */
  278. # port = 6666;
  279. #
  280. # /* hub mask: the mask of servers that this server may hub. Multiple
  281. # * entries are permitted
  282. # */
  283. # hub_mask = "*";
  284. #
  285. # /* leaf mask: the mask of servers this server may not hub. Multiple
  286. # * entries are permitted. Useful for forbidding EU -> US -> EU routes.
  287. # */
  288. # #leaf_mask = "*.uk";
  289. #
  290. # /* class: the class this server is in */
  291. # class = "server";
  292. #
  293. # /* autoconnect: controls whether we autoconnect to this server or not,
  294. # * dependent on class limits.
  295. # */
  296. # autoconn = no;
  297. #
  298. # /* compressed: controls whether traffic is compressed via ziplinks.
  299. # * By default this is disabled
  300. # */
  301. # #compressed = yes;
  302. #
  303. # /* lazylink: controls whether this server is a LazyLink. LazyLink
  304. # * servers may NOT hub. see doc/LazyLinks.as.implemented.txt
  305. # */
  306. # #lazylink = yes;
  307. #
  308. # /* masking: the servername we pretend to be when we connect */
  309. # #fakename = "*.arpa";
  310. #};
  311.  
  312. #connect {
  313. # name = "ipv6.some.server";
  314. # host = "3ffd:dead:beef::1";
  315. # send_password = "password";
  316. # accept_password = "password";
  317. # port = 6666;
  318. #
  319. # /* aftype: controls whether the connection uses "ipv4" or "ipv6".
  320. # * Default is ipv4. */
  321. # aftype = ipv6;
  322. # class = "server";
  323. #};
  324.  
  325. /* shared {}: users that are allowed to remote kline (OLD U:) */
  326. shared {
  327. /* name: the server the user must be on to set klines. If this is not
  328. * specified, the user will be allowed to kline from all servers.
  329. */
  330. name = "hybrid7.debian.local";
  331.  
  332. /* user: the user@host mask that is allowed to set klines. If this is
  333. * not specified, all users on the server above will be allowed to set
  334. * a remote kline.
  335. */
  336. user = "root@localhost";
  337. };
  338.  
  339. /* kill {}: users that are not allowed to connect (OLD K:)
  340. * Oper issued klines will be added to the specified kline config
  341. */
  342. #kill {
  343. # user = "bad@*.hacked.edu";
  344. # reason = "Obviously hacked account";
  345. #};
  346.  
  347. /* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
  348. * Oper issued dlines will be added to the specified dline config
  349. */
  350. /*
  351. deny {
  352. ip = "10.0.1.0/24";
  353. reason = "Reconnecting vhosted bots";
  354. };
  355.  
  356. # exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:)
  357. exempt {
  358. ip = "192.168.0.0/16";
  359. };
  360. */
  361.  
  362. /* resv {}: nicks and channels users may not use/join (OLD Q:) */
  363. resv {
  364. /* reason: the reason for the proceeding resv's */
  365. reason = "There are no services on this network";
  366.  
  367. /* resv: the nicks and channels users may not join/use */
  368. nick = "nickserv";
  369. nick = "chanserv";
  370. channel = "#services";
  371.  
  372. /* resv: wildcard masks are also supported in nicks only */
  373. reason = "Clone bots";
  374. nick = "clone*";
  375. };
  376.  
  377. /* gecos {}: The X: replacement, used for banning users based on their
  378. * "realname". The action may be either:
  379. * warn: allow client to connect, but send message to opers
  380. * reject: drop clients but also send message to opers.
  381. * silent: silently drop clients who match.
  382. */
  383. #gecos {
  384. # name = "*sex*";
  385. # reason = "Possible spambot";
  386. # action = warn;
  387. #};
  388.  
  389. #gecos {
  390. # name = "sub7server";
  391. # reason = "Trojan drone";
  392. # action = reject;
  393. #};
  394.  
  395. #gecos {
  396. # name = "*http*";
  397. # reason = "Spambot";
  398. # action = silent;
  399. #};
  400.  
  401. /* The channel block contains options pertaining to channels */
  402. channel {
  403. /* invex: Enable/disable channel mode +I, a n!u@h list of masks
  404. * that can join a +i channel without an invite.
  405. */
  406. use_invex = yes;
  407.  
  408. /* except: Enable/disable channel mode +e, a n!u@h list of masks
  409. * that can join a channel through a ban (+b).
  410. */
  411. use_except = yes;
  412.  
  413. /* knock: Allows users to request an invite to a channel that
  414. * is locked somehow (+ikl). If the channel is +p or you are banned
  415. * the knock will not be sent.
  416. */
  417. use_knock = yes;
  418.  
  419. /* knock delay: The amount of time a user must wait between issuing
  420. * the knock command.
  421. */
  422. knock_delay = 5 minutes;
  423.  
  424. /* knock channel delay: How often a knock to any specific channel
  425. * is permitted, regardless of the user sending the knock.
  426. */
  427. knock_delay_channel = 1 minute;
  428.  
  429. /* max chans: The maximum number of channels a user can join/be on. */
  430. max_chans_per_user = 15;
  431.  
  432. /* quiet on ban: stop banned people talking in channels. */
  433. quiet_on_ban = yes;
  434.  
  435. /* max bans: maximum number of +b/e/I modes in a channel */
  436. max_bans = 25;
  437.  
  438. /* splitcode: the ircd will check every 60s as to whether splitmode
  439. * should be disabled or not, so there may be a delay between a
  440. * netsplit ending and splitmode ending.
  441. *
  442. * both split users and split servers must be true to enter splitmode
  443. *
  444. * you may force splitmode to be permanent by /quote set splitmode on
  445. */
  446.  
  447. /* split users: when the usercount is lower than this level, consider
  448. * ourselves split. this must be set for automatic splitmode
  449. */
  450. default_split_user_count = 0;
  451.  
  452. /* split servers: when the servercount is lower than this, consider
  453. * ourselves split. this must be set for automatic splitmode
  454. */
  455. default_split_server_count = 0;
  456.  
  457. /* split no create: disallow users creating channels on split. */
  458. no_create_on_split = no;
  459.  
  460. /* split: no join: disallow users joining channels at all on a split */
  461. no_join_on_split = no;
  462.  
  463. /* disable local channels: prevent users from joining &channels.
  464. * This is extreme, but it is still a flaw in serverhide. It will
  465. * however remove far more from users than it will give back in
  466. * security.
  467. */
  468. disable_local_channels = no;
  469. };
  470.  
  471.  
  472. /* The serverhide block contains the options regarding serverhiding */
  473. serverhide {
  474. /* flatten links: this option will show all servers in /links appear
  475. * that they are linked to this current server
  476. */
  477. flatten_links = no;
  478.  
  479. /* links delay: how often to update the links file when it is
  480. * flattened.
  481. */
  482. links_delay = 5 minutes;
  483.  
  484. /* hidden: hide this server from a /links output on servers that
  485. * support it. this allows hub servers to be hidden etc.
  486. */
  487. hidden = no;
  488.  
  489. /* disable hidden: prevent servers hiding themselves from a
  490. * /links ouput.
  491. */
  492. disable_hidden = no;
  493.  
  494. /* hide servers: hide remote servernames everywhere and instead use
  495. * network_name and network_desc.
  496. */
  497. hide_servers = no;
  498. };
  499.  
  500. /* The general block contains many of the options that were once compiled
  501. * in options in config.h. The general block is read at start time.
  502. */
  503. general {
  504. /* oper pass resv: allow opers to over-ride RESVs on nicks/channels */
  505. oper_pass_resv = yes;
  506.  
  507. /* disable remote: disable users doing commands on remote servers */
  508. disable_remote_commands = no;
  509.  
  510. /* floodcount: the default value of floodcount that is configurable
  511. * via /quote set floodcount. This is the amount of lines a user
  512. * may send to any other user/channel in one second.
  513. */
  514. default_floodcount = 10;
  515.  
  516. /* failed oper notice: send a notice to all opers on the server when
  517. * someone tries to OPER and uses the wrong password, host or ident.
  518. */
  519. failed_oper_notice = yes;
  520.  
  521. /* dots in ident: the amount of '.' characters permitted in an ident
  522. * reply before the user is rejected.
  523. */
  524. dots_in_ident=2;
  525.  
  526. /* dot in ipv6: ircd-hybrid-6.0 and earlier will disallow hosts
  527. * without a '.' in them. this will add one to the end. only needed
  528. * for older servers.
  529. */
  530. dot_in_ip6_addr = yes;
  531.  
  532. /* min nonwildcard: the minimum non wildcard characters in k/d/g lines
  533. * placed via the server. klines hand placed are exempt from limits.
  534. * wildcard chars: '.' '*' '?' '@'
  535. */
  536. min_nonwildcard = 4;
  537.  
  538. /* max accept: maximum allowed /accept's for +g usermode */
  539. max_accept = 20;
  540.  
  541. /* nick flood: enable the nickflood control code */
  542. anti_nick_flood = yes;
  543.  
  544. /* nick flood: the nick changes allowed in the specified period */
  545. max_nick_time = 20 seconds;
  546. max_nick_changes = 5;
  547.  
  548. /* anti spam time: the minimum time a user must be connected before
  549. * custom quit messages are allowed.
  550. *
  551. * The upstream default is 2 minutes.
  552. */
  553. anti_spam_exit_message_time = 0 minutes;
  554.  
  555. /* ts delta: the time delta allowed between server clocks before
  556. * a warning is given, or before the link is dropped. all servers
  557. * should run ntpdate/rdate to keep clocks in sync
  558. */
  559. ts_warn_delta = 30 seconds;
  560. ts_max_delta = 5 minutes;
  561.  
  562. /* kline reason: show the user the reason why they are k/d/glined
  563. * on exit. may give away who set k/dline when set via tcm.
  564. */
  565. kline_with_reason = yes;
  566.  
  567. /* kline connection closed: make the users quit message on channels
  568. * to be "Connection closed", instead of the kline reason.
  569. */
  570. # kline_with_connection_closed = no;
  571.  
  572. /* warn no nline: warn opers about servers that try to connect but
  573. * we dont have a connect {} block for. Twits with misconfigured
  574. * servers can get really annoying with this enabled.
  575. */
  576. warn_no_nline = yes;
  577.  
  578. /* stats o oper only: make stats o (opers) oper only */
  579. stats_o_oper_only=yes;
  580.  
  581. /* stats P oper only: make stats P (ports) oper only */
  582. stats_P_oper_only=no;
  583.  
  584. /* stats i oper only: make stats i (auth {}) oper only. set to:
  585. * yes: show users no auth blocks, made oper only.
  586. * masked: show users first matching auth block
  587. * no: show users all auth blocks.
  588. */
  589. stats_i_oper_only=masked;
  590.  
  591. /* stats k/K oper only: make stats k/K (klines) oper only. set to:
  592. * yes: show users no auth blocks, made oper only
  593. * masked: show users first matching auth block
  594. * no: show users all auth blocks.
  595. */
  596. stats_k_oper_only=masked;
  597.  
  598. /* caller id wait: time between notifying a +g user that somebody
  599. * is messaging them.
  600. */
  601. caller_id_wait = 1 minute;
  602.  
  603. /* pace wait simple: time between use of less intensive commands
  604. * (HELP, remote WHOIS, WHOWAS)
  605. */
  606. pace_wait_simple = 1 second;
  607.  
  608. /* pace wait: time between more intensive commands
  609. * (ADMIN, INFO, LIST, LUSERS, MOTD, STATS, VERSION)
  610. */
  611. pace_wait = 10 seconds;
  612.  
  613. /* short motd: send clients a notice telling them to read the motd
  614. * instead of forcing a motd to clients who may simply ignore it.
  615. */
  616. short_motd = no;
  617.  
  618. /* ping cookies: require clients to respond exactly to a ping command,
  619. * can help block certain types of drones and FTP PASV mode spoofing.
  620. */
  621. ping_cookie = no;
  622.  
  623. /* no oper flood: increase flood limits for opers. */
  624. no_oper_flood = yes;
  625.  
  626. /* true no oper flood: completely eliminate flood limits for opers
  627. * and for clients with can_flood = yes in their auth {} blocks
  628. */
  629. true_no_oper_flood = yes;
  630.  
  631. /* idletime: the maximum amount of time a user may idle before
  632. * they are disconnected
  633. */
  634. idletime = 0;
  635.  
  636. /* REMOVE ME. The following line checks you've been reading. */
  637. # havent_read_conf = 1;
  638.  
  639. /* max targets: the maximum amount of targets in a single
  640. * PRIVMSG/NOTICE. set to 999 NOT 0 for unlimited.
  641. */
  642. max_targets = 999;
  643.  
  644. /* client flood: maximum number of lines in a clients queue before
  645. * they are dropped for flooding.
  646. */
  647. client_flood = 20;
  648.  
  649. /* message locale: the default message locale if gettext() is enabled
  650. * and working.
  651. * Use "custom" for the (in)famous Hybrid custom messages.
  652. * Use "standard" for the compiled in defaults.
  653. */
  654. message_locale = "standard";
  655.  
  656. /* usermodes configurable: a list of usermodes for the options below
  657. *
  658. * +b - bots - See bot and drone flooding notices
  659. * +c - cconn - Client connection/quit notices
  660. * +d - debug - See debugging notices
  661. * +f - full - See I: line full notices
  662. * +g - callerid - Server Side Ignore
  663. * +i - invisible - Not shown in NAMES or WHO unless you share a
  664. * a channel
  665. * +k - skill - See server generated KILL messages
  666. * +l - locops - See LOCOPS messages
  667. * +n - nchange - See client nick changes
  668. * +r - rej - See rejected client notices
  669. * +s - servnotice - See general server notices
  670. * +u - unauth - See unauthorized client notices
  671. * +w - wallop - See server generated WALLOPS
  672. * +x - external - See remote server connection and split notices
  673. * +y - spy - See LINKS, STATS, TRACE notices etc.
  674. * +z - operwall - See oper generated WALLOPS
  675. */
  676.  
  677. /* oper only umodes: usermodes only opers may set */
  678. oper_only_umodes = bots, cconn, debug, full, skill, nchange,
  679. rej, spy, external, operwall, locops, unauth;
  680.  
  681. /* oper umodes: default usermodes opers get when they /oper */
  682. oper_umodes = locops, servnotice, operwall, wallop;
  683.  
  684. /* servlink path: path to 'servlink' program used by ircd to handle
  685. * encrypted/compressed server <-> server links.
  686. *
  687. * unless you move servlink around (???), you shouldn't define this.
  688. */
  689. #servlink_path = "/usr/lib/ircd-hybrid/servlink";
  690.  
  691. /* default cipher: default cipher to use for cryptlink when none is
  692. * specified in connect block.
  693. */
  694. default_cipher_preference = "BF/128";
  695.  
  696. /* use egd: if your system does not have *random devices yet you
  697. * want to use OpenSSL and encrypted links, enable this. Beware -
  698. * EGD is *very* CPU intensive when gathering data for its pool
  699. */
  700. #use_egd = yes;
  701.  
  702. /* egdpool path: path to EGD pool. Not necessary for OpenSSL >= 0.9.7
  703. * which automatically finds the path.
  704. */
  705. #egdpool_path = "/var/run/egd-pool";
  706.  
  707.  
  708. /* compression level: level of compression for compressed links between
  709. * servers.
  710. *
  711. * values are between: 1 (least compression, fastest)
  712. * and: 9 (most compression, slowest).
  713. */
  714. #compression_level = 6;
  715.  
  716. /* throttle time: the minimum amount of time between connections from
  717. * the same ip. exempt {} blocks are excluded from this throttling.
  718. * Offers protection against flooders who reconnect quickly.
  719. * Set to 0 to disable.
  720. */
  721. throttle_time = 0;
  722. };
  723.  
  724. glines {
  725. /* enable: enable glines, network wide temp klines */
  726. enable = yes;
  727.  
  728. /*
  729. * duration: the amount of time a gline will remain on your
  730. * server before expiring
  731. */
  732. duration = 1 day;
  733.  
  734. /*
  735. * logging: which types of rules you want to log when triggered
  736. * (choose reject or block)
  737. */
  738. logging = reject, block;
  739.  
  740. /*
  741. * NOTE: gline ACLs can cause a desync of glines throughout the
  742. * network, meaning some servers may have a gline triggered, and
  743. * others may not. Also, you only need insert rules for glines
  744. * that you want to block and/or reject. If you want to accept and
  745. * propagate the gline, do NOT put a rule for it.
  746. */
  747.  
  748. /* user@host for rule to apply to */
  749. user = "god@I.still.hate.packets";
  750. /* server for rule to apply to */
  751. name = "hades.arpa";
  752.  
  753. /*
  754. * action: action to take when a matching gline is found. options are:
  755. * reject - do not apply the gline locally
  756. * block - do not propagate the gline
  757. */
  758. action = reject, block;
  759.  
  760. user = "god@*";
  761. name = "*";
  762. action = block;
  763. };
  764.  
  765. modules {
  766. /* module path: paths to search for modules specified below and
  767. * in /modload.
  768. */
  769. path = "/usr/lib/ircd-hybrid/modules";
  770. path = "/usr/lib/ircd-hybrid/modules/autoload";
  771.  
  772. /* module: the name of a module to load on startup/rehash */
  773. module = "m_tburst.so";
  774. };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!