API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 27th, 2018
240
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.06 KB | None | 0 0
raw download clone embed print report
  1. /* ircd.conf - ircd-hybrid-7 Example configuration file
  2. * Copyright (C) 2000-2005 Hybrid Development Team
  3. *
  4. * Written by ejb, wcampbel, db, leeh and others
  5. * Other example configurations can be found in the source dir under
  6. * etc/.
  7. *
  8. * $Id: example.conf,v 1.55.2.5 2005/10/15 10:48:36 michael Exp $
  9. */
  10.  
  11. /* IMPORTANT NOTES:
  12. *
  13. * auth {} blocks MUST be specified in order of precedence. The first one
  14. * that matches a user will be used. So place spoofs first, then specials,
  15. * then general access.
  16. *
  17. * Both shell style (#) and C style comments are supported.
  18. *
  19. * Files may be included by either:
  20. * .include "filename"
  21. * .include <filename>
  22. *
  23. * Times/durations are written as:
  24. * 12 hours 30 minutes 1 second
  25. *
  26. * Valid units of time:
  27. * month, week, day, hour, minute, second
  28. *
  29. * Valid units of size:
  30. * megabyte/mbyte/mb, kilobyte/kbyte/kb, byte
  31. *
  32. * Sizes and times may be singular or plural.
  33. */
  34.  
  35. /* EFNET NOTE:
  36. *
  37. * This config file is NOT suitable for EFNet. EFNet admins should use
  38. * example.efnet.conf
  39. */
  40.  
  41. /* serverinfo {}: Contains information about the server. (OLD M:) */
  42. serverinfo {
  43. /* name: the name of our server */
  44. name = "irc.cr3ativiz.web.id";
  45.  
  46. /* A server's unique ID. This is three characters long and must be in
  47. * the form [0-9][A-Z/0-9][A-Z/0-9]. The first character must be a
  48. * digit, followed by 2 alpha-numerical letters.
  49. * Note: The letters must be capitalized.
  50. */
  51. sid = "M4";
  52.  
  53. /* description: the description of the server. '[' and ']' may not
  54. * be used here for compatibility with older servers.
  55. */
  56. description = "cr3ativiz";
  57.  
  58. /* network info: the name and description of the network this server
  59. * is on. Shown in the 005 reply and used with serverhiding.
  60. */
  61. network_name = "cr3ativiz";
  62. network_desc = "cr3ativiz Network";
  63.  
  64. /* hub: allow this server to act as a hub and have multiple servers
  65. * connected to it. This may not be changed if there are active
  66. * LazyLink servers.
  67. */
  68. hub = no;
  69.  
  70. /* vhost: the IP to bind to when we connect outward to ipv4 servers.
  71. * This should be an ipv4 IP only.
  72. */
  73. #vhost = "192.169.0.1";
  74.  
  75. /* vhost6: the IP to bind to when we connect outward to ipv6 servers.
  76. * This should be an ipv6 IP only.
  77. */
  78. #vhost6 = "3ffe:80e8:546::2";
  79.  
  80. /* max clients: the maximum number of clients allowed to connect */
  81. max_clients = 512;
  82.  
  83. /* rsa key: the path to the file containing our rsa key for cryptlink.
  84. *
  85. * Example command to store a 2048 bit RSA keypair in
  86. * rsa.key, and the public key in rsa.pub:
  87. *
  88. * openssl genrsa -out rsa.key 2048
  89. * openssl rsa -in rsa.key -pubout -out rsa.pub
  90. * chown <ircd-user>.<ircd.group> rsa.key rsa.pub
  91. * chmod 0600 rsa.key
  92. * chmod 0644 rsa.pub
  93. */
  94. # rsa_private_key_file = "/usr/local/ircd/etc/rsa.key";
  95. };
  96.  
  97. /* admin {}: contains admin information about the server. (OLD A:) */
  98. admin {
  99. name = "Marwanz";
  100. description = "Main Server Administrator";
  101. email = "<admin@id-h.org>";
  102. };
  103.  
  104. /* logging {}: contains information about logfiles. */
  105. logging {
  106. /* Do you want to enable logging to ircd.log? */
  107. use_logging = yes;
  108.  
  109. /* logfiles: the logfiles to use for user connects, /oper uses,
  110. * and failed /oper. These files must exist for logging to be used.
  111. */
  112. fuserlog = "logs/userlog";
  113. foperlog = "logs/operlog";
  114. ffailed_operlog = "logs/foperlog";
  115.  
  116. /* log level: the amount of detail to log in ircd.log. The
  117. * higher, the more information is logged. May be changed
  118. * once the server is running via /quote SET LOG. Either:
  119. * L_CRIT, L_ERROR, L_WARN, L_NOTICE, L_TRACE, L_INFO or L_DEBUG
  120. */
  121. log_level = L_INFO;
  122. };
  123.  
  124. /* class {}: contain information about classes for users (OLD Y:) */
  125. class {
  126. /* name: the name of the class. classes are text now */
  127. name = "users";
  128.  
  129. /* ping time: how often a client must reply to a PING from the
  130. * server before they are dropped.
  131. */
  132. ping_time = 2 minutes;
  133.  
  134. /* number per ip: the number of users per host allowed to connect */
  135. number_per_ip = 2;
  136.  
  137. /* number global per ip: the number of global users on this IP */
  138. max_global = 10;
  139.  
  140. /* number local per ip: the number of local users on this IP */
  141. max_local = 2;
  142.  
  143. /* max number: the maximum number of users allowed in this class */
  144. max_number = 100;
  145.  
  146. /* sendq: the amount of data allowed in a clients queue before
  147. * they are dropped.
  148. */
  149. sendq = 100 kbytes;
  150. };
  151.  
  152. class {
  153. name = "opers";
  154. ping_time = 5 minutes;
  155. number_per_ip = 10;
  156. max_number = 100;
  157. sendq = 100kbytes;
  158. };
  159.  
  160. class {
  161. name = "server";
  162. ping_time = 5 minutes;
  163.  
  164. /*
  165. * connectfreq: only used in server classes. specifies the delay
  166. * between autoconnecting to servers.
  167. */
  168. connectfreq = 5 minutes;
  169.  
  170. /* max number: the amount of servers to autoconnect to */
  171. max_number = 1;
  172.  
  173. /* sendq: servers need a higher sendq as they send more data */
  174. sendq = 2 megabytes;
  175. };
  176.  
  177. /* listen {}: contain information about the ports ircd listens on (OLD P:) */
  178. listen {
  179. /* port: the specific port to listen on. if no host is specified
  180. * before, it will listen on all available IPs.
  181. *
  182. * ports are separated via a comma, a range may be specified using ".."
  183. */
  184.  
  185. /* port: listen on all available IPs, ports 6665 to 6669 */
  186. port = 6665 .. 6669;
  187.  
  188. /* host: set a specific IP/host the ports after the line will listen
  189. * on. This may be ipv4 or ipv6.
  190. */
  191. host = "108.166.174.130";
  192. port = 6667, 7000;
  193. };
  194.  
  195. /* auth {}: allow users to connect to the ircd (OLD I:) */
  196. auth {
  197. /*
  198. * user: the user@host allowed to connect. Multiple IPv4/IPv6 user
  199. * lines are permitted per auth block.
  200. */
  201. user = "*@172.16.0.0/12";
  202. user = "*test@123D:B567:*";
  203.  
  204. /* password: an optional password that is required to use this block */
  205. password = "letmein";
  206.  
  207. /*
  208. * spoof: fake the users host to this. This is free-form,
  209. * just do everyone a favor and don't abuse it. ('=' prefix on /stats I)
  210. */
  211. spoof = "I.still.hate.packets";
  212.  
  213. /* class: the class the user is placed in */
  214. class = "opers";
  215.  
  216. /*
  217. * need_password: don't allow users who haven't supplied the correct
  218. * password to connect using another auth{} block
  219. * ('&' prefix on /stats I if disabled)
  220. * need_ident: require the user to have identd to connect ('+' prefix on /stats I)
  221. * spoof_notice: enable spoofing notification to admins
  222. * exceed_limit: allow a user to exceed class limits ('>' prefix on /stats I)
  223. * kline_exempt: exempt this user from k/glines ('^' prefix on /stats I)
  224. * gline_exempt: exempt this user from glines ('_' prefix on /stats I)
  225. * resv_exempt: exempt this user from resvs ('$' prefix on /stats I)
  226. * no_tilde: remove ~ from a user with no ident ('-' prefix on /stats I)
  227. * can_flood: allow this user to exceed flood limits ('|' prefix on /stats I)
  228. * can_idle: exempt this use from idle restrictions ('<' prefix on /stats I)
  229. */
  230. flags = need_password, spoof_notice, exceed_limit, kline_exempt,
  231. gline_exempt, resv_exempt, no_tilde, can_flood, can_idle;
  232. };
  233.  
  234. auth {
  235. /*
  236. * redirect: the server and port to redirect a user to. A user does
  237. * not have to obey the redirection, the ircd just suggests an alternative
  238. * server for them.
  239. */
  240. redirserv = "irc.fi";
  241. redirport = 6667;
  242.  
  243. user = "*.fi";
  244.  
  245. /* class: a class is required even though it is not used */
  246. class = "users";
  247. };
  248.  
  249. auth {
  250. user = "*@*";
  251. class = "users";
  252. flags = need_ident;
  253. };
  254.  
  255. /* operator {}: defines ircd operators. (OLD O:)
  256. * ircd-hybrid no longer supports local operators, privileges are
  257. * controlled via flags.
  258. */
  259. operator {
  260. /* name: the name of the oper */
  261. /* Note: operator "opername"{} is also supported */
  262. # name = "super-g1g0";
  263.  
  264. /*
  265. * user: the user@host required for this operator. CIDR is not
  266. * supported. multiple user="" lines are supported.
  267. */
  268. user = "*super-g1g0@*";
  269. user = "*@*";
  270.  
  271. /*
  272. * password: the password required to oper. By default this will
  273. * need to be encrypted using 'mkpasswd'. MD5 is supported.
  274. */
  275. password = "etcnjl8juSU1E";
  276.  
  277. /*
  278. * encrypted: controls whether the oper password above has been
  279. * encrypted. (OLD CRYPT_OPER_PASSWORD now optional per operator)
  280. */
  281. encrypted = no;
  282.  
  283. /*
  284. * rsa_public_key_file: the public key for this oper when using Challenge.
  285. * A password should not be defined when this is used, see
  286. * doc/challenge.txt for more information.
  287. */
  288. # rsa_public_key_file = "/usr/local/ircd/etc/oper.pub";
  289.  
  290. /* class: the class the oper joins when they successfully /oper */
  291. class = "opers";
  292.  
  293. /*
  294. * privileges: controls the activities and commands an oper is
  295. * allowed to do on the server. All options default to no.
  296. * Available options:
  297. *
  298. * global_kill: allows remote users to be /KILL'd (OLD 'O' flag)
  299. * remote: allows remote SQUIT and CONNECT (OLD 'R' flag)
  300. * remoteban: allows remote KLINE/UNKLINE
  301. * kline: allows KILL, KLINE and DLINE (OLD 'K' flag)
  302. * unkline: allows UNKLINE and UNDLINE (OLD 'U' flag)
  303. * gline: allows GLINE (OLD 'G' flag)
  304. * xline: allows XLINE (OLD 'X' flag)
  305. * operwall: allows OPERWALL
  306. * nick_changes: allows oper to see nickchanges (OLD 'N' flag)
  307. * via usermode +n
  308. * rehash: allows oper to REHASH config (OLD 'H' flag)
  309. * die: allows DIE and RESTART (OLD 'D' flag)
  310. * admin: gives admin privileges. admins
  311. * may (un)load modules and see the
  312. * real IPs of servers.
  313. * hidden_admin: same as 'admin', but noone can recognize you as
  314. * being an admin
  315. * hidden_oper: not shown in /stats p (except for other operators)
  316. */
  317. /* You can either use
  318. * die = yes;
  319. * rehash = yes;
  320. *
  321. * or in a flags statement i.e.
  322. * flags = die, rehash;
  323. *
  324. * You can also negate a flag with ~ i.e.
  325. * flags = ~remote;
  326. *
  327. */
  328. hidden_oper = yes;
  329. flags = global_kill, remote, kline, unkline, xline,
  330. die, rehash, nick_changes, admin, ~operwall, kline, xline, gline, unkline, global_kill, remote, remote_ban;
  331. };
  332.  
  333. /* connect {}: controls servers we connect to (OLD C:, N:, H:, L:) */
  334. connect {
  335. /* name: the name of the server */
  336. name = "irc.cr3ativiz.web.id";
  337.  
  338. /*
  339. * host: the host or IP to connect to. If a hostname is used it
  340. * must match the reverse dns of the server.
  341. */
  342. host = "108.166.174.130";
  343.  
  344. /*
  345. * passwords: the passwords we send (OLD C:) and accept (OLD N:).
  346. * The remote server will have these passwords reversed.
  347. */
  348. send_password = "gantenggw";
  349. accept_password = "gantenggw";
  350.  
  351. /*
  352. * encrypted: controls whether the accept_password above has been
  353. * encrypted. (OLD CRYPT_LINK_PASSWORD now optional per connect)
  354. */
  355. encrypted = no;
  356.  
  357. /* port: the port to connect to this server on */
  358. port = 7007;
  359.  
  360. /*
  361. * hub_mask: the mask of servers that this server may hub. Multiple
  362. * entries are permitted
  363. */
  364. hub_mask = "*";
  365.  
  366. /*
  367. * leaf_mask: the mask of servers this server may not hub. Multiple
  368. * entries are permitted. Useful for forbidding EU -> US -> EU routes.
  369. */
  370. # leaf_mask = "*web.id";
  371.  
  372. /* masking: the servername we pretend to be when we connect */
  373. # fakename = "*.cr3ativiz";
  374.  
  375. /* class: the class this server is in */
  376. class = "server";
  377.  
  378. /*
  379. * autoconn: controls whether we autoconnect to this server or not,
  380. * dependent on class limits. By default, this is disabled.
  381. * compressed: controls whether traffic is compressed via ziplinks.
  382. * By default, this is disabled
  383. * lazylink: controls whether this server is a LazyLink. LazyLink
  384. * servers may NOT hub. See doc/LazyLinks.txt
  385. * cryptlink: enable full encryption for all data passing between our
  386. * server and this link and rsa authentication.
  387. * burst_away: This will send the /away string that users have set
  388. * on the server burst. Note this can be a lot of data
  389. * and slow down your server burst.
  390. */
  391. # flags = autoconn, lazylink, compressed, cryptlink, burst_away;
  392. };
  393.  
  394. connect {
  395. name = "encrypted.auth.example";
  396. host = "some.host.somewhere";
  397. port = 6667;
  398.  
  399. flags = cryptlink;
  400.  
  401. /*
  402. * rsa_public_key_file: the path to the public keyfile of the server.
  403. * Used instead of passwords.
  404. */
  405. rsa_public_key_file = "etc/remote.server.keyfile";
  406.  
  407. /* cipher preference: set the preferred cipher for this link
  408. *
  409. * Available ciphers are:
  410. * BF/168 BF/128 CAST/128 IDEA/128 RC5.16/128
  411. * RC5.12/128 RC5.8/128 3DES/168 DES/56
  412. *
  413. * NOTE: Some ciphers may not be supported by your OpenSSL.
  414. * Check the output from 'configure' for available ciphers.
  415. *
  416. * NOTE2: To help you decide what cipher to use, tools/encspeed
  417. * will show you approximately how fast each cipher is.
  418. * However, blowfish is fast and secure, and is probably
  419. * a good default for most situations.
  420. *
  421. * NOTE3: Default if none is set is BF/128
  422. *
  423. * The cipher *MUST* be the same in both directions. If you
  424. * set a cipher preference, your uplink must set the same cipher,
  425. * else it will not link.
  426. */
  427. # cipher_preference = "BF/168";
  428. };
  429.  
  430. /*
  431. * Note: Don't add an extra 'name=' entry if you use
  432. * the connect "name"{} feature
  433. */
  434. connect "ipv6.some.server" {
  435. host = "3ffd:dead:beef::1";
  436. send_password = "password";
  437. accept_password = "password";
  438. port = 6666;
  439.  
  440. /*
  441. * aftype: controls whether the connection uses "ipv4" or "ipv6".
  442. * Default is ipv4.
  443. */
  444. aftype = ipv6;
  445. class = "server";
  446. };
  447.  
  448. /* cluster{}: servers that share klines/unkline/xline/unxline/resv/unresv/locops
  449. * automatically (OLD hyb6 SLAVE_SERVERS)
  450. */
  451. cluster {
  452. /* name: the server to share with, this can take wildcards */
  453. /* NOTE: only local actions will be clustered, meaning if
  454. * the server receives a shared kline/unkline/etc, it
  455. * will not be propagated to clustered servers.
  456. *
  457. * Remote servers are not necessarily required to accept
  458. * clustered lines, they need a shared{} for *THIS* server
  459. * in order to accept them.
  460. */
  461. name = "*.arpa";
  462.  
  463. /* type: list of what to share, options are as follows:
  464. * kline - share klines
  465. * unkline - share unklines
  466. * xline - share xlines
  467. * unxline - share unxlines
  468. * resv - share resvs
  469. * unresv - share unresvs
  470. * locops - share locops
  471. * all - share all of the above (default)
  472. */
  473. type = kline, unkline, locops, xline, resv;
  474. };
  475.  
  476. /* shared {}: users that are allowed to remote kline (OLD U:) */
  477. shared {
  478. /*
  479. * name: the server the user must be on to set klines. If this is not
  480. * specified, the user will be allowed to kline from all servers.
  481. */
  482. name = "irc2.some.server";
  483.  
  484. /*
  485. * user: the user@host mask that is allowed to set klines. If this is
  486. * not specified, all users on the server above will be allowed to set
  487. * a remote kline.
  488. */
  489. user = "oper@my.host.is.spoofed";
  490.  
  491. /*
  492. * type: list of what to share, options are as follows:
  493. * kline - allow oper/server to kline
  494. * unkline - allow oper/server to unkline
  495. * xline - allow oper/server to xline
  496. * unxline - allow oper/server to unxline
  497. * resv - allow oper/server to resv
  498. * unresv - allow oper/server to unresv
  499. * locops - allow oper/server to locops - only used for servers that cluster
  500. * all - allow oper/server to do all of the above (default)
  501. */
  502. type = kline, unkline, resv;
  503. };
  504.  
  505. /* kill {}: users that are not allowed to connect (OLD K:)
  506. * Oper issued klines will be added to the specified kline config
  507. */
  508. kill {
  509. user = "bad@*.hacked.edu";
  510. reason = "Obviously hacked account";
  511. };
  512.  
  513. /* deny {}: IPs that are not allowed to connect (before DNS/ident lookup)
  514. * Oper issued dlines will be added to the specified dline config
  515. */
  516. deny {
  517. ip = "10.0.1.0/24";
  518. reason = "Reconnecting vhosted bots";
  519. };
  520.  
  521. /* exempt {}: IPs that are exempt from deny {} and Dlines. (OLD d:) */
  522. exempt {
  523. ip = "192.168.0.0/16";
  524. };
  525.  
  526. /* resv {}: nicks and channels users may not use/join (OLD Q:) */
  527. resv {
  528. /* reason: the reason for the proceeding resv's */
  529. reason = "There are no services on this network";
  530.  
  531. /* resv: the nicks and channels users may not join/use */
  532. nick = "nickserv";
  533. nick = "chanserv";
  534. channel = "#services";
  535.  
  536. /* resv: wildcard masks are also supported in nicks only */
  537. reason = "Clone bots";
  538. nick = "clone*";
  539. };
  540.  
  541. /* gecos {}: The X: replacement, used for banning users based on their
  542. * "realname". The action may be either:
  543. * warn: allow client to connect, but send message to opers
  544. * reject: drop clients but also send message to opers.
  545. * silent: silently drop clients who match.
  546. */
  547. gecos {
  548. name = "*sex*";
  549. reason = "Possible spambot";
  550. };
  551.  
  552. gecos {
  553. name = "sub7server";
  554. reason = "Trojan drone";
  555. };
  556.  
  557. gecos {
  558. name = "*http*";
  559. reason = "Spambot";
  560. };
  561.  
  562. /* The channel block contains options pertaining to channels */
  563. channel {
  564. /* disable local channels: prevent users from joining &channels.
  565. * This is extreme, but it is still a flaw in serverhide. It will
  566. * however remove far more from users than it will give back in
  567. * security.
  568. */
  569. disable_local_channels = no;
  570.  
  571. /* invex: Enable/disable channel mode +I, a n!u@h list of masks
  572. * that can join a +i channel without an invite.
  573. */
  574. use_invex = yes;
  575.  
  576. /* except: Enable/disable channel mode +e, a n!u@h list of masks
  577. * that can join a channel through a ban (+b).
  578. */
  579. use_except = yes;
  580.  
  581. /* knock: Allows users to request an invite to a channel that
  582. * is locked somehow (+ikl). If the channel is +p or you are banned
  583. * the knock will not be sent.
  584. */
  585. use_knock = yes;
  586.  
  587. /* knock delay: The amount of time a user must wait between issuing
  588. * the knock command.
  589. */
  590. knock_delay = 5 minutes;
  591.  
  592. /* knock channel delay: How often a knock to any specific channel
  593. * is permitted, regardless of the user sending the knock.
  594. */
  595. knock_delay_channel = 1 minute;
  596.  
  597. /* invite ops only: Restrict /invite to ops/halfops on channels,
  598. * rather than allowing unopped users to invite people to a -i channel.
  599. */
  600. invite_ops_only = yes;
  601.  
  602. /* max chans: The maximum number of channels a user can join/be on. */
  603. max_chans_per_user = 15;
  604.  
  605. /* quiet on ban: stop banned people talking in channels. */
  606. quiet_on_ban = yes;
  607.  
  608. /* max bans: maximum number of +b/e/I modes in a channel */
  609. max_bans = 25;
  610.  
  611. /* splitcode: The ircd will now check splitmode every few seconds.
  612. *
  613. * Either split users or split servers can activate splitmode, but
  614. * both conditions must be met for the ircd to deactivate splitmode.
  615. *
  616. * You may force splitmode to be permanent by /quote set splitmode on
  617. */
  618.  
  619. /* split users: when the usercount is lower than this level, consider
  620. * ourselves split. this must be set for automatic splitmode
  621. */
  622. default_split_user_count = 0;
  623.  
  624. /* split servers: when the servercount is lower than this, consider
  625. * ourselves split. this must be set for automatic splitmode
  626. */
  627. default_split_server_count = 0;
  628.  
  629. /* split no create: disallow users creating channels on split. */
  630. no_create_on_split = yes;
  631.  
  632. /* split: no join: disallow users joining channels at all on a split */
  633. no_join_on_split = no;
  634. };
  635.  
  636.  
  637. /* The serverhide block contains the options regarding serverhiding */
  638. serverhide {
  639. /* flatten links: this option will show all servers in /links appear
  640. * that they are linked to this current server
  641. */
  642. flatten_links = no;
  643.  
  644. /* links delay: how often to update the links file when it is
  645. * flattened.
  646. */
  647. links_delay = 5 minutes;
  648.  
  649. /* hidden: hide this server from a /links output on servers that
  650. * support it. this allows hub servers to be hidden etc.
  651. */
  652. hidden = no;
  653.  
  654. /* disable hidden: prevent servers hiding themselves from a
  655. * /links output.
  656. */
  657. disable_hidden = no;
  658.  
  659. /* hide servers: hide remote servernames everywhere and instead use
  660. * network_name and network_desc.
  661. */
  662. hide_servers = no;
  663.  
  664. /* If this is disabled, opers will be unable to see servers ips and will be
  665. * shown a masked ip, admins will be shown the real ip.
  666. *
  667. * If this is enabled, nobody can see a servers ip. *This is a kludge*, it
  668. * has the side effect of hiding the ips everywhere, including logfiles.
  669. *
  670. * We recommend you leave this disabled, and just take care with who you
  671. * give admin=yes; to.
  672. */
  673. hide_server_ips = no;
  674.  
  675. };
  676.  
  677. /* The general block contains many of the options that were once compiled
  678. * in options in config.h. The general block is read at start time.
  679. */
  680. general {
  681. /*
  682. * gline_min_cidr: the minimum required length of a CIDR bitmask
  683. * for IPv4 based glines
  684. */
  685. gline_min_cidr = 16;
  686.  
  687. /*
  688. * gline_min_cidr6: the minimum required length of a CIDR bitmask
  689. * for IPv6 based glines
  690. */
  691. gline_min_cidr6 = 48;
  692.  
  693. /*
  694. * If you don't explicitly specify burst_away in your connect blocks, then
  695. * they will default to the burst_away value below.
  696. */
  697. burst_away = no;
  698.  
  699. /*
  700. * Show "actually using host <ip>" on /whois when possible.
  701. */
  702. use_whois_actually = yes;
  703.  
  704. /*
  705. * Max time from the nickname change that still causes KILL
  706. * automatically to switch for the current nick of that user. (seconds)
  707. */
  708. kill_chase_time_limit = 90;
  709.  
  710. /*
  711. * If hide_spoof_ips is disabled, opers will be allowed to see the real IP of spoofed
  712. * users in /trace etc. If this is defined they will be shown a masked IP.
  713. */
  714. hide_spoof_ips = yes;
  715.  
  716. /*
  717. * Ignore bogus timestamps from other servers. Yes, this will desync
  718. * the network, but it will allow chanops to resync with a valid non TS 0
  719. *
  720. * This should be enabled network wide, or not at all.
  721. */
  722. ignore_bogus_ts = no;
  723.  
  724. /*
  725. * disable auth: completely disable ident lookups; if you enable this,
  726. * be careful of what you set have_ident to in your auth {} blocks
  727. */
  728. disable_auth = no;
  729.  
  730. /* disable remote commands: disable users doing commands on remote servers */
  731. disable_remote_commands = no;
  732.  
  733. /*
  734. * Disable temporary kline/xline expire notices yes/no
  735. */
  736. tkline_expire_notices = no;
  737.  
  738. /*
  739. * floodcount: the default value of floodcount that is configurable
  740. * via /quote set floodcount. This is the amount of lines a user
  741. * may send to any other user/channel in one second.
  742. */
  743. default_floodcount = 10;
  744.  
  745. /* failed oper notice: send a notice to all opers on the server when
  746. * someone tries to OPER and uses the wrong password, host or ident.
  747. */
  748. failed_oper_notice = yes;
  749.  
  750. /* dots in ident: the amount of '.' characters permitted in an ident
  751. * reply before the user is rejected.
  752. */
  753. dots_in_ident = 2;
  754.  
  755. /* dot in ipv6: ircd-hybrid-6.0 and earlier will disallow hosts
  756. * without a '.' in them. this will add one to the end. only needed
  757. * for older servers.
  758. */
  759. dot_in_ip6_addr = yes;
  760.  
  761. /* min nonwildcard: the minimum non wildcard characters in k/d/g lines
  762. * placed via the server. klines hand placed are exempt from limits.
  763. * wildcard chars: '.' ':' '*' '?' '@' '#'
  764. */
  765. min_nonwildcard = 4;
  766.  
  767. /* min nonwildcard simple: the minimum non wildcard characters in
  768. * gecos bans. wildcard chars: '*' '?' '#'
  769. */
  770. min_nonwildcard_simple = 3;
  771.  
  772. /* max accept: maximum allowed /accept's for +g usermode */
  773. max_accept = 20;
  774.  
  775. /* nick flood: enable the nickflood control code */
  776. anti_nick_flood = yes;
  777.  
  778. /* nick flood: the nick changes allowed in the specified period */
  779. max_nick_time = 20 seconds;
  780. max_nick_changes = 5;
  781.  
  782. /* anti spam time: the minimum time a user must be connected before
  783. * custom quit messages are allowed.
  784. */
  785. anti_spam_exit_message_time = 5 minutes;
  786.  
  787. /* ts delta: the time delta allowed between server clocks before
  788. * a warning is given, or before the link is dropped. all servers
  789. * should run ntpdate/rdate to keep clocks in sync
  790. */
  791. ts_warn_delta = 30 seconds;
  792. ts_max_delta = 5 minutes;
  793.  
  794. /* kline reason: show the user the reason why they are k/d/glined
  795. * on exit. may give away who set k/dline when set via tcm.
  796. */
  797. kline_with_reason = yes;
  798.  
  799. /* kline reason : show this message to users on channel
  800. * instead of the oper reason.
  801. */
  802. kline_reason = "Connection closed";
  803.  
  804. /* warn no nline: warn opers about servers that try to connect but
  805. * we don't have a connect {} block for. Twits with misconfigured
  806. * servers can get really annoying with this enabled.
  807. */
  808. warn_no_nline = yes;
  809.  
  810. /* stats o oper only: make stats o (opers) oper only */
  811. stats_o_oper_only = yes;
  812.  
  813. /* stats P oper only: make stats P (ports) oper only */
  814. stats_P_oper_only = no;
  815.  
  816. /* stats i oper only: make stats i (auth {}) oper only. set to:
  817. * yes: show users no auth blocks, made oper only.
  818. * masked: show users first matching auth block
  819. * no: show users all auth blocks.
  820. */
  821. stats_i_oper_only = masked;
  822.  
  823. /* stats k/K oper only: make stats k/K (klines) oper only. set to:
  824. * yes: show users no auth blocks, made oper only
  825. * masked: show users first matching auth block
  826. * no: show users all auth blocks.
  827. */
  828. stats_k_oper_only = masked;
  829.  
  830. /* caller id wait: time between notifying a +g user that somebody
  831. * is messaging them.
  832. */
  833. caller_id_wait = 1 minute;
  834.  
  835. /* pace wait simple: time between use of less intensive commands
  836. * (HELP, remote WHOIS, WHOWAS)
  837. */
  838. pace_wait_simple = 1 second;
  839.  
  840. /* pace wait: time between more intensive commands
  841. * (ADMIN, INFO, LIST, LUSERS, MOTD, STATS, VERSION)
  842. */
  843. pace_wait = 10 seconds;
  844.  
  845. /* short motd: send clients a notice telling them to read the motd
  846. * instead of forcing a motd to clients who may simply ignore it.
  847. */
  848. short_motd = no;
  849.  
  850. /* ping cookies: require clients to respond exactly to a ping command,
  851. * can help block certain types of drones and FTP PASV mode spoofing.
  852. */
  853. ping_cookie = no;
  854.  
  855. /* no oper flood: increase flood limits for opers. */
  856. no_oper_flood = yes;
  857.  
  858. /* true no oper flood: completely eliminate flood limits for opers
  859. * and for clients with can_flood = yes in their auth {} blocks
  860. */
  861. true_no_oper_flood = yes;
  862.  
  863. /* oper pass resv: allow opers to over-ride RESVs on nicks/channels */
  864. oper_pass_resv = yes;
  865.  
  866. /* idletime: the maximum amount of time a user may idle before
  867. * they are disconnected
  868. */
  869. idletime = 0;
  870.  
  871. /* maximum links: the maximum amount of servers to connect to for
  872. * connect blocks without a valid class.
  873. */
  874. maximum_links = 1;
  875.  
  876. /* REMOVE ME. The following line checks you've been reading. */
  877. havent_read_conf = 1;
  878.  
  879. /* max targets: the maximum amount of targets in a single
  880. * PRIVMSG/NOTICE. set to 999 NOT 0 for unlimited.
  881. */
  882. max_targets = 4;
  883.  
  884. /* client flood: maximum amount of data in a clients queue before
  885. * they are dropped for flooding.
  886. */
  887. client_flood = 2560 bytes;
  888.  
  889. /* message locale: the default message locale
  890. * Use "standard" for the compiled in defaults.
  891. * To install the translated messages, go into messages/ in the
  892. * source directory and run `make install'.
  893. */
  894. message_locale = "standard";
  895.  
  896. /* usermodes configurable: a list of usermodes for the options below
  897. *
  898. * +b - bots - See bot and drone flooding notices
  899. * +c - cconn - Client connection/quit notices
  900. * +D - deaf - Don't receive channel messages
  901. * +d - debug - See debugging notices
  902. * +f - full - See I: line full notices
  903. * +G - softcallerid - Server Side Ignore for users not on your channels
  904. * +g - callerid - Server Side Ignore
  905. * +i - invisible - Not shown in NAMES or WHO unless you share a
  906. * a channel
  907. * +k - skill - See server generated KILL messages
  908. * +l - locops - See LOCOPS messages
  909. * +n - nchange - See client nick changes
  910. * +r - rej - See rejected client notices
  911. * +s - servnotice - See general server notices
  912. * +u - unauth - See unauthorized client notices
  913. * +w - wallop - See server generated WALLOPS
  914. * +x - external - See remote server connection and split notices
  915. * +y - spy - See LINKS, STATS, TRACE notices etc.
  916. * +z - operwall - See oper generated WALLOPS
  917. */
  918.  
  919. /* oper only umodes: usermodes only opers may set */
  920. oper_only_umodes = bots, cconn, debug, full, skill, nchange,
  921. rej, spy, external, operwall, locops, unauth;
  922.  
  923. /* oper umodes: default usermodes opers get when they /oper */
  924. oper_umodes = locops, servnotice, operwall, wallop;
  925.  
  926.  
  927. /* servlink path: path to 'servlink' program used by ircd to handle
  928. * encrypted/compressed server <-> server links.
  929. *
  930. * only define if servlink is not in same directory as ircd itself.
  931. */
  932. #servlink_path = "/usr/local/ircd/bin/servlink";
  933.  
  934. /* default cipher: default cipher to use for cryptlink when none is
  935. * specified in connect block.
  936. */
  937. #default_cipher_preference = "BF/168";
  938.  
  939. /* use egd: if your system does not have *random devices yet you
  940. * want to use OpenSSL and encrypted links, enable this. Beware -
  941. * EGD is *very* CPU intensive when gathering data for its pool
  942. */
  943. # use_egd = yes;
  944.  
  945. /* egdpool path: path to EGD pool. Not necessary for OpenSSL >= 0.9.7
  946. * which automatically finds the path.
  947. */
  948. # egdpool_path = "/var/run/egd-pool";
  949.  
  950.  
  951. /* compression level: level of compression for compressed links between
  952. * servers.
  953. *
  954. * values are between: 1 (least compression, fastest)
  955. * and: 9 (most compression, slowest).
  956. */
  957. # compression_level = 6;
  958.  
  959. /* throttle time: the minimum amount of time between connections from
  960. * the same ip. exempt {} blocks are excluded from this throttling.
  961. * Offers protection against flooders who reconnect quickly.
  962. * Set to 0 to disable.
  963. */
  964. throttle_time = 10;
  965. };
  966.  
  967. glines {
  968. /* enable: enable glines, network wide temp klines */
  969. enable = yes;
  970.  
  971. /* duration: the amount of time a gline will remain on your server before expiring */
  972. duration = 1 day;
  973.  
  974. /* logging: which types of rules you want to log when triggered (choose reject or block) */
  975. logging = reject, block;
  976.  
  977. /*
  978. * NOTE: gline ACLs can cause a desync of glines throughout the network, meaning some servers
  979. * may have a gline triggered, and others may not. Also, you only need insert rules for glines
  980. * that you want to block and/or reject. If you want to accept and propagate the gline, do NOT
  981. * put a rule for it.
  982. */
  983.  
  984. /* user@host for rule to apply to */
  985. user = "god@I.still.hate.packets";
  986. /* server for rule to apply to */
  987. name = "hades.arpa";
  988.  
  989. /* action: action to take when a matching gline is found. options are:
  990. * reject - do not apply the gline locally
  991. * block - do not propagate the gline
  992. */
  993. action = reject, block;
  994.  
  995. user = "god@*";
  996. name = "*";
  997. action = block;
  998. };
  999.  
  1000. modules {
  1001. /* module path: other paths to search for modules specified below
  1002. * and in /modload.
  1003. */
  1004. path = "/usr/local/ircd/modules";
  1005. path = "/usr/local/ircd/modules/autoload";
  1006.  
  1007. /* module: the name of a module to load on startup/rehash */
  1008. #module = "some_module.so";
  1009. };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!