2007-07-16 17:30:04 +00:00
|
|
|
########################################################################
|
|
|
|
|
# #
|
|
|
|
|
# ___ ___ ____ ____ _ #
|
|
|
|
|
# |_ _|_ __ ___ _ __|_ _| _ \ / ___|__| | #
|
|
|
|
|
# | || '_ \/ __| '_ \| || |_) | | / _` | #
|
|
|
|
|
# | || | | \__ \ |_) | || _ <| |__| (_| | #
|
|
|
|
|
# |___|_| |_|___/ .__/___|_| \_\\____\__,_| #
|
|
|
|
|
# |_| #
|
|
|
|
|
# ____ __ _ _ _ #
|
|
|
|
|
# / ___|___ _ __ / _(_) __ _ _ _ _ __ __ _| |_(_) ___ _ __ #
|
|
|
|
|
# | | / _ \| '_ \| |_| |/ _` | | | | '__/ _` | __| |/ _ \| '_ \ #
|
|
|
|
|
# | |__| (_) | | | | _| | (_| | |_| | | | (_| | |_| | (_) | | | | #
|
|
|
|
|
# \____\___/|_| |_|_| |_|\__, |\__,_|_| \__,_|\__|_|\___/|_| |_| #
|
|
|
|
|
# |___/ #
|
|
|
|
|
# #
|
|
|
|
|
##################################||####################################
|
|
|
|
|
#||#
|
|
|
|
|
##################################||####################################
|
|
|
|
|
# #
|
|
|
|
|
# This is an example of the config file for InspIRCd. #
|
|
|
|
|
# Change the options to suit your network #
|
|
|
|
|
# #
|
2008-07-01 18:48:22 +00:00
|
|
|
# $Id$ #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# Lines prefixed with READ THIS BIT, as shown above, are IMPORTANT #
|
|
|
|
|
# lines, and you REALLY SHOULD READ THEM. Yes, THIS MEANS YOU. Even #
|
|
|
|
|
# if you've configured InspIRCd before, these probably indicate #
|
|
|
|
|
# something new or different to this version and you SHOULD READ IT. #
|
|
|
|
|
# #
|
|
|
|
|
########################################################################
|
|
|
|
|
# #
|
|
|
|
|
# Unalphabeticalise the modules list at your own risk #
|
|
|
|
|
# #
|
|
|
|
|
########################################################################
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- SERVER DESCRIPTION -#-#-#-#-#-#-#-#-#-#-#-#-
|
|
|
|
|
# #
|
|
|
|
|
# Here is where you enter the information about your server. #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# #
|
|
|
|
|
# <server name="server.name" #
|
|
|
|
|
# description="Server Description" #
|
2007-08-27 19:56:38 +00:00
|
|
|
# id="serverid" #
|
2007-07-16 17:30:04 +00:00
|
|
|
# network="MyNetwork"> #
|
|
|
|
|
# #
|
2008-03-02 21:59:08 +00:00
|
|
|
# The server name should be a syntactically valid hostname, with at #
|
|
|
|
|
# least one '.', and does not need to resolve to an IP address. #
|
|
|
|
|
# #
|
|
|
|
|
# The description is freeform text. Remember you may put quotes in #
|
|
|
|
|
# this field by escaping it using \". #
|
|
|
|
|
# #
|
|
|
|
|
# The network field indicates the network name given in on connect #
|
|
|
|
|
# to clients. It is used by many clients such as mIRC to select a #
|
|
|
|
|
# perform list, so it should be identical on all servers on a net #
|
|
|
|
|
# and should not contain spaces. #
|
|
|
|
|
# #
|
2008-03-02 16:48:03 +00:00
|
|
|
# The server ID is optional, and if omitted automatically calculated #
|
|
|
|
|
# from the server name and description. This is similar in #
|
|
|
|
|
# in behaviour to the server id on ircu and charybdis ircds. #
|
2007-08-27 19:56:38 +00:00
|
|
|
# You should only need to set this manually if there is a collision #
|
2007-09-21 11:14:42 +00:00
|
|
|
# between two server ID's on the network. The server ID must be #
|
2008-03-02 21:54:31 +00:00
|
|
|
# three digits or letters long, of which the first digit must always #
|
|
|
|
|
# be a number, and the other two letters may be any of 0-9 and A-Z. #
|
|
|
|
|
# For example, 3F9, 03J and 666 are all valid server IDs, and A9D, #
|
|
|
|
|
# QFX and 5eR are not. Remember, in most cases you will not need to #
|
|
|
|
|
# even set this value, it is calculated for you from your server #
|
|
|
|
|
# name and description. Changing these will change your auto- #
|
|
|
|
|
# generated ID. #
|
2007-08-27 19:56:38 +00:00
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
<server name="penguin.omega.org.za"
|
|
|
|
|
description="Waddle World"
|
2008-03-23 21:04:01 +00:00
|
|
|
network="Omega">
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- ADMIN INFORMATION -#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# Describes the Server Administrator's real name (optionally), #
|
|
|
|
|
# nick, and email address. #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# <admin name="real name" #
|
|
|
|
|
# nick="nick name" #
|
|
|
|
|
# email="email@address.com"> #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<admin name="Johnny English"
|
|
|
|
|
nick="MI5"
|
|
|
|
|
email="MI5@the.best.secret.agent">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- PORT CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-
|
|
|
|
|
# #
|
|
|
|
|
# Enter the port and address bindings here. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# bind address - Specifies which address ports bind to. Leaving this #
|
2007-09-21 11:14:42 +00:00
|
|
|
# field blank binds the port to all IP's available. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# port - The port number to bind to. You may specify a port #
|
|
|
|
|
# range here, e.g. "6667-6669,7000,7001". If you do #
|
|
|
|
|
# this, the server will count each port within your #
|
2007-10-03 06:57:40 +00:00
|
|
|
# range as a separate binding, making the above #
|
|
|
|
|
# example equivalent to five separate bind tags. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# A failure on one port in the range does not prevent #
|
|
|
|
|
# the entire range from being bound, just that one #
|
|
|
|
|
# port number. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# type - Can be 'clients' or 'servers'. The clients type is #
|
2007-09-21 11:14:42 +00:00
|
|
|
# a standard TCP based socket, the servers type is a #
|
2007-07-16 17:30:04 +00:00
|
|
|
# also a TCP based connection but of a different #
|
|
|
|
|
# format. SSL support is provided by modules, to #
|
|
|
|
|
# enable SSL support, please read the module section #
|
|
|
|
|
# of this configuration file. #
|
|
|
|
|
# #
|
|
|
|
|
# ssl - When using m_ssl_gnutls.so or m_ssl_openssl.so #
|
|
|
|
|
# modules, you must define this value to use ssl on #
|
2008-02-01 21:09:21 +00:00
|
|
|
# that port. Valid values are 'gnutls' or 'openssl' #
|
2007-07-16 17:30:04 +00:00
|
|
|
# respectively. If the module is not loaded, this #
|
|
|
|
|
# setting is ignored. #
|
|
|
|
|
# #
|
|
|
|
|
# transport - If you have m_spanningtree.so loaded, along with #
|
2007-09-21 11:14:42 +00:00
|
|
|
# either one of the SSL modules (m_ssl_gnutls or #
|
2007-07-16 17:30:04 +00:00
|
|
|
# m_ssl_openssl) or m_ziplinks.so, then you may make #
|
|
|
|
|
# use of this value. #
|
2008-02-01 21:09:21 +00:00
|
|
|
# Setting it to 'openssl' or 'gnutls' or 'zip' #
|
2007-07-16 17:30:04 +00:00
|
|
|
# indicates that the port should accept connections #
|
|
|
|
|
# using the given transport name. Transports are #
|
|
|
|
|
# layers which sit on top of a socket and change the #
|
|
|
|
|
# way data is sent and received, e.g. encryption, #
|
|
|
|
|
# compression, and other such things. Because this #
|
|
|
|
|
# may not be limited in use to just encryption, #
|
|
|
|
|
# the 'ssl' value used for client ports does not #
|
|
|
|
|
# exist for servers, and this value is used instead. #
|
|
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# If you want to link servers to InspIRCd you must load the #
|
2007-09-21 11:14:42 +00:00
|
|
|
# m_spanningtree.so module! Please see the modules list below for #
|
2007-07-16 17:30:04 +00:00
|
|
|
# information on how to load this module! If you do not load this #
|
|
|
|
|
# module, server ports will NOT be bound! #
|
|
|
|
|
# #
|
|
|
|
|
# Leaving address empty binds to all available interfaces #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# #
|
|
|
|
|
# <bind address="ip address" port="port" type="clients"> #
|
|
|
|
|
# <bind address="ip address" port="port" type="servers"> #
|
|
|
|
|
# #
|
2007-09-21 11:14:42 +00:00
|
|
|
# If InspIRCd is built for IPv6, and you wish to accept IPv4 clients, #
|
|
|
|
|
# then you can specify IPv4 ip addresses here to bind. You may also #
|
|
|
|
|
# use the 4in6 notation, ::ffff:1.2.3.4, where 1.2.3.4 is the IPv4 #
|
2007-07-16 17:30:04 +00:00
|
|
|
# address to bind the port, but as of InspIRCd 1.1.1, this is not #
|
|
|
|
|
# required. #
|
|
|
|
|
# #
|
|
|
|
|
# ------------------------------------------------------------------- #
|
|
|
|
|
# #
|
2007-09-21 11:14:42 +00:00
|
|
|
# PLEASE NOTE: If you have build InspIRCd as an IPv6 server, and you #
|
2007-07-16 17:30:04 +00:00
|
|
|
# specify an empty bind address, the binding will be bound to ALL THE #
|
2007-09-21 11:14:42 +00:00
|
|
|
# IPv6 IP ADDRESSES, and not the IPv4 addresses. If you are using an #
|
|
|
|
|
# IPv6 enabled InspIRCd and want to bind to multiple IPv4 addresses #
|
2007-07-16 17:30:04 +00:00
|
|
|
# in this way, you must specify them by hand. If you have built the #
|
2007-09-21 11:14:42 +00:00
|
|
|
# server for IPv4 connections only, then specifying an empty bind #
|
|
|
|
|
# address binds the port to all IPv4 IP addresses, as expected. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<bind address="" port="6000" type="clients">
|
|
|
|
|
<bind address="" port="6660-6669" type="clients" ssl="gnutls">
|
|
|
|
|
|
|
|
|
|
# When linking servers, the openssl and gnutls transports are largely
|
|
|
|
|
# link-compatible and can be used alongside each other or either/or
|
|
|
|
|
# on each end of the link without any significant issues.
|
|
|
|
|
|
|
|
|
|
<bind address="" port="7000,7001" type="servers">
|
|
|
|
|
<bind address="1.2.3.4" port="7005" type="servers" transport="openssl">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#- DIE/RESTART CONFIGURATION -#-#-#-#-#-#-#-#-#-#-
|
|
|
|
|
# #
|
|
|
|
|
# You can configure the passwords here which you wish to use for #
|
2007-09-21 11:14:42 +00:00
|
|
|
# the die and restart commands. Only trusted IRCop's who will #
|
2007-07-16 17:30:04 +00:00
|
|
|
# need this ability should know the die and restart password. #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# <power diepass="die password" restartpass="restart password" #
|
|
|
|
|
# pause="secs before dying"> #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<power diepass="" restartpass="" pause="2">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-# INCLUDE CONFIGURATION #-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This optional tag allows you to include another config file #
|
|
|
|
|
# allowing you to keep your configuration tidy. The configuration #
|
|
|
|
|
# file you include will be treated as part of the configuration file #
|
|
|
|
|
# which includes it, in simple terms the inclusion is transparent. #
|
|
|
|
|
# #
|
|
|
|
|
# All paths to config files are relative to the directory of the main #
|
|
|
|
|
# config file inspircd.conf, unless the filename starts with a forward#
|
|
|
|
|
# slash (/) in which case it is treated as an absolute path. #
|
|
|
|
|
# #
|
2008-04-05 02:39:26 +00:00
|
|
|
# You may also include an executable file, in which case if you do so #
|
|
|
|
|
# the output of the executable on the standard output will be added #
|
|
|
|
|
# to your config at the point of the include tag. #
|
|
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
# Syntax is as follows: #
|
|
|
|
|
#<include file="file.conf"> #
|
2008-04-05 02:39:26 +00:00
|
|
|
#<include executable="/path/to/executable parameters"> #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#- CONNECTIONS CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This is where you can configure which connections are allowed #
|
|
|
|
|
# and denied access onto your server. The password is optional. #
|
|
|
|
|
# You may have as many of these as you require. To allow/deny all #
|
|
|
|
|
# connections, use a '*' or 0.0.0.0/0. #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# #
|
2007-10-24 22:52:51 +00:00
|
|
|
# <connect name="myallow" allow="1.2.3.0/24" limit="5" #
|
2007-08-19 19:09:29 +00:00
|
|
|
# password="blahblah" timeout="10" timeout="blah" #
|
|
|
|
|
# flood="5" threshold="8" pingfreq="120" sendq="99999" #
|
2007-07-16 17:30:04 +00:00
|
|
|
# revcq="696969" localmax="3" globalmax="3" #
|
2007-10-25 21:21:13 +00:00
|
|
|
# port="6660" maxchans="50" limit="999"> #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2007-08-19 19:09:29 +00:00
|
|
|
# <connect name="blocked" deny="127.0.0.1" port="6667"> #
|
|
|
|
|
# #
|
|
|
|
|
# <connect name="something" parent="myallow" pingfreq="60"> #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# IP masks may be specified in CIDR format or wildcard format, #
|
2007-09-21 11:14:42 +00:00
|
|
|
# for IPv4 and IPv6. You *cannot* use hostnames in the allow or #
|
2007-07-16 17:30:04 +00:00
|
|
|
# deny field, as the state is applied before the user's DNS has #
|
|
|
|
|
# been resolved. #
|
|
|
|
|
# #
|
2007-08-19 19:09:29 +00:00
|
|
|
# You can optionally name your connect allow/deny tags. If you do #
|
|
|
|
|
# this, you may reference this connect tag as the parent of another #
|
|
|
|
|
# connect tag with the <connect:parent> option as shown above. If #
|
|
|
|
|
# you do this, any options not explicitly specified in the tag will #
|
|
|
|
|
# be copied from the parent. #
|
|
|
|
|
# #
|
2007-08-19 20:14:05 +00:00
|
|
|
# If the value maxchans is included, this overrides all other max #
|
2007-10-03 17:30:03 +00:00
|
|
|
# channels related settings, including the separate oper maximum. #
|
2007-08-19 20:14:05 +00:00
|
|
|
# You may set this to any (sane) value you wish and it applies to #
|
|
|
|
|
# all users within this connect tag. #
|
|
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
# You may optionally include timeout="x" on any allow line, which #
|
|
|
|
|
# specifies the amount of time given before an unknown connection #
|
2007-09-21 11:14:42 +00:00
|
|
|
# is closed if USER/NICK/PASS are not given. This value is in secs. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2007-10-24 22:52:51 +00:00
|
|
|
# You may optionally limit the number of clients that are matched #
|
|
|
|
|
# by a single <connect> tag by specifying the maximum in the limit #
|
|
|
|
|
# parameter. If set to 0, there is no limit, which is the default. #
|
|
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
# You should also include a flood="x" line which indicates #
|
|
|
|
|
# the number of lines a user may place into their buffer at once #
|
|
|
|
|
# before they are disconnected for excess flood. This feature can #
|
|
|
|
|
# not be disabled, however it can be set to extremely high values, #
|
|
|
|
|
# rendering it effectively disabled. A recommended value is 10. #
|
|
|
|
|
# A counter is maintained for each user which is reset every #
|
|
|
|
|
# 'threshold' seconds and specifying this threshold value with #
|
|
|
|
|
# threshold="X" indicates how often the counter is reset. For #
|
|
|
|
|
# example, with flood="5" and threshold="8", the user may not send #
|
|
|
|
|
# more than 5 lines in 8 secs. #
|
|
|
|
|
# #
|
|
|
|
|
# You may optionally specify the sendq size and ping frequency of #
|
|
|
|
|
# each connect:allow line using the pingfreq="X" and sendq="X" #
|
|
|
|
|
# settings as shown in the full example below. #
|
|
|
|
|
# The ping frequency is specified in seconds, and the sendq size #
|
|
|
|
|
# in bytes. It is recommended, although not enforced, that you #
|
2007-09-21 11:14:42 +00:00
|
|
|
# should never set your sendq size to less than 8K. Send Queues are #
|
2007-07-16 17:30:04 +00:00
|
|
|
# dynamically allocated and can grow as needed up to the maximum #
|
|
|
|
|
# size specified. #
|
|
|
|
|
# #
|
|
|
|
|
# The optional recvq value is the maximum size which users in this #
|
|
|
|
|
# group may grow their receive queue to. This is recommended to be #
|
|
|
|
|
# kept pretty low compared to the sendq, as users will always #
|
|
|
|
|
# receive more than they send in normal circumstances. The default #
|
|
|
|
|
# if not specified is 4096. #
|
|
|
|
|
# #
|
|
|
|
|
# The sendq is the data waiting to be sent TO THE USER. #
|
|
|
|
|
# The recvq is the data being received FROM THE USER. #
|
|
|
|
|
# The names sendq and recvq are from the SERVER'S PERSPECTIVE not #
|
|
|
|
|
# that of the user... Just to clear up any confusion or complaints #
|
|
|
|
|
# that these are backwards :p #
|
|
|
|
|
# #
|
|
|
|
|
# The localmax and globalmax values can be used to enforce local #
|
|
|
|
|
# and global session limits on connections. The session limits are #
|
|
|
|
|
# counted against all users, but applied only to users within the #
|
|
|
|
|
# class. For example, if you had a class 'A' which has a session #
|
|
|
|
|
# limit of 3, and a class 'B' which has a session limit of 5, and #
|
|
|
|
|
# somehow, two users managed to get into class B which also match #
|
|
|
|
|
# class A, there is only one connection left for this IP now in A, #
|
|
|
|
|
# but if they can connect again to B, there are three. You get the #
|
|
|
|
|
# idea (i hope). #
|
|
|
|
|
# #
|
2008-07-12 13:58:37 +00:00
|
|
|
# NOTE NOTE NOTE NOTE NOTE NOTE! #
|
|
|
|
|
# The maximum limits by default apply to individual IP addresses #
|
|
|
|
|
# This *MAY* be changed by modifying the <cidr> block, in order #
|
|
|
|
|
# to detect cloning across an ISP. #
|
|
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
# The optional port value determines which port the connect tag is #
|
|
|
|
|
# handling. If left out the connect tag covers all bound ports else #
|
|
|
|
|
# only incoming connections on the specified port will match. Port #
|
|
|
|
|
# tags may be used on connect allow and connect deny tags. #
|
|
|
|
|
# #
|
2007-10-25 21:21:13 +00:00
|
|
|
# The limit value determines the maximum number of users which may #
|
|
|
|
|
# be in this class. Combine this with CIDR masks for various ISP #
|
|
|
|
|
# subnets to limit the number of users which may connect at any one #
|
|
|
|
|
# time from a certain ISP. Omit this value to not limit the tag. #
|
|
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
<connect allow="196.12.*" password="secret" port="6667">
|
|
|
|
|
|
|
|
|
|
<connect allow="*"
|
|
|
|
|
timeout="60"
|
|
|
|
|
flood="20"
|
|
|
|
|
threshold="1"
|
|
|
|
|
pingfreq="120"
|
|
|
|
|
sendq="262144"
|
|
|
|
|
recvq="8192"
|
|
|
|
|
localmax="3"
|
2007-10-25 21:21:13 +00:00
|
|
|
globalmax="3"
|
|
|
|
|
limit="5000">
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
<connect deny="69.254.*">
|
|
|
|
|
<connect deny="3ffe::0/32">
|
|
|
|
|
|
2008-07-12 13:58:37 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- CIDR CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-
|
|
|
|
|
# #
|
|
|
|
|
# CIDR configuration allows detection of clones and applying of #
|
|
|
|
|
# throttle limits across a CIDR range. (A CIDR range is a group of #
|
|
|
|
|
# IPs, for example, the CIDR range 192.168.1.0-192.168.1.255 may be #
|
|
|
|
|
# represented as 192.168.1.0/24). This means that abuse across an ISP #
|
|
|
|
|
# is detected and curtailed much easier. #
|
|
|
|
|
# #
|
|
|
|
|
# ipv4clone: #
|
|
|
|
|
# This specifies how many bits of an IP address should be checked #
|
|
|
|
|
# against cloning in the <connect> tags, for example, if <connect> #
|
|
|
|
|
# tags specified a limit of 2 (low!), and three users attempted to #
|
|
|
|
|
# connect in the IP range 192.168.1.0-192.168.1.255, and ipv4clone #
|
|
|
|
|
# was set to '24', the third connection would be disconnected. #
|
|
|
|
|
# #
|
2008-07-14 16:22:29 +00:00
|
|
|
# Valid values are 0-32, but you *don't* want 0. Using values which #
|
|
|
|
|
# are not multiples of 8 can give confusing behaviour. #
|
|
|
|
|
# For more info, see: http://www.inspircd.org/wiki/CIDR_Tutorial #
|
2008-07-12 13:58:37 +00:00
|
|
|
# #
|
|
|
|
|
# ipv6clone works in the same way, except for ipv6 addresses. Valid #
|
|
|
|
|
# range is 0-128, but you *don't* want anything too small. #
|
|
|
|
|
# #
|
|
|
|
|
# Setting these to their maximum value (32, 128) will result in #
|
|
|
|
|
# no actual CIDR checking being done, and clone checking will only be #
|
|
|
|
|
# done across individual IPs. This is the default behaviour. #
|
|
|
|
|
|
|
|
|
|
<cidr
|
|
|
|
|
ipv4clone="32"
|
|
|
|
|
ipv6clone="128">
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- CLASS CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-
|
|
|
|
|
# #
|
2007-09-24 01:14:52 +00:00
|
|
|
# Classes are a group of commands which are grouped together and #
|
|
|
|
|
# given a unique name. They're used to define which commands #
|
2007-07-16 17:30:04 +00:00
|
|
|
# are available to certain types of Operators. #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# #
|
2008-03-23 21:04:01 +00:00
|
|
|
# <class name="name" commands="oper commands" #
|
|
|
|
|
# usermodes="allowed oper only usermodes" #
|
|
|
|
|
# chanmodes="allowed oper only channelmodes"> #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2008-03-23 21:04:01 +00:00
|
|
|
# The name value indicates a name for this class. #
|
|
|
|
|
# The commands value indicates a list of one or more commands that #
|
|
|
|
|
# are allowed by this class (see also 'READ THIS BIT' below). #
|
|
|
|
|
# The usermodes and chanmodes values indicate lists of usermodes and #
|
|
|
|
|
# channel modes this oper can execute. This only applies to modes #
|
|
|
|
|
# that are marked oper-only such as usermode +Q and channelmode +O. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# You are not forced to give these classes the names given below. #
|
|
|
|
|
# You can create your own named classes, if you want, in fact that #
|
|
|
|
|
# is the whole idea of this system! #
|
|
|
|
|
# #
|
|
|
|
|
# Note: It is possible to make a class which covers all available #
|
|
|
|
|
# commands. To do this, specify commands="*". This is not really #
|
|
|
|
|
# recommended, as it negates the whole purpose of the class system, #
|
|
|
|
|
# however it is provided for fast configuration (e.g. in test nets) #
|
|
|
|
|
# #
|
|
|
|
|
|
2008-03-23 21:04:01 +00:00
|
|
|
<class name="Shutdown" commands="DIE RESTART REHASH LOADMODULE UNLOADMODULE RELOAD" usermodes="*" chanmodes="*">
|
|
|
|
|
<class name="ServerLink" commands="CONNECT SQUIT RCONNECT MKPASSWD MKSHA256" usermodes="*" chanmodes="*">
|
|
|
|
|
<class name="BanControl" commands="KILL GLINE KLINE ZLINE QLINE ELINE" usermodes="*" chanmodes="*">
|
|
|
|
|
<class name="OperChat" commands="WALLOPS GLOBOPS SETIDLE SPYLIST SPYNAMES" usermodes="*" chanmodes="*">
|
|
|
|
|
<class name="HostCloak" commands="SETHOST SETIDENT SETNAME CHGHOST CHGIDENT" usermodes="*" chanmodes="*">
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- OPERATOR COMPOSITION -#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This is where you specify which types of operators you have on #
|
|
|
|
|
# your server, as well as the commands they are allowed to use. #
|
|
|
|
|
# This works alongside with the classes specified above. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# type name - A name for the combined class types. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# a type name cannot contain spaces, however if you #
|
|
|
|
|
# put an _ symbol in the name, it will be translated #
|
|
|
|
|
# to a space when displayed in a WHOIS. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# classes - Specified above, used for flexibility for the #
|
2007-07-16 17:30:04 +00:00
|
|
|
# server admin to decide on which operators get #
|
|
|
|
|
# what commands. Class names are case sensitive, #
|
2007-10-03 06:57:40 +00:00
|
|
|
# separate multiple class names with spaces. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# host - Optional hostmask operators will receive on oper-up. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# #
|
|
|
|
|
# <type name="name" classes="class names" host="oper hostmask"> #
|
|
|
|
|
# #
|
|
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# You are not forced to give these types the names given below. #
|
|
|
|
|
# You can create your own named types, if you want, in fact that #
|
|
|
|
|
# is the whole idea of this system! #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<type name="NetAdmin" classes="OperChat BanControl HostCloak Shutdown ServerLink" host="netadmin.omega.org.za">
|
|
|
|
|
<type name="GlobalOp" classes="OperChat BanControl HostCloak ServerLink" host="ircop.omega.org.za">
|
|
|
|
|
<type name="Helper" classes="HostCloak" host="helper.omega.org.za">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#- OPERATOR CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# Opers are defined here. This is a very important section. #
|
2007-09-24 01:14:52 +00:00
|
|
|
# Remember to only make operators out of trust worthy people. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# name - Oper name, this is case sensitive, so it is best to #
|
2007-07-16 17:30:04 +00:00
|
|
|
# use lower-case. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# password - Password to oper-up, also case sensitive. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# encryption is supported via modules. You may load #
|
|
|
|
|
# modules for MD5 or SHA256 encryption, and if you do, #
|
|
|
|
|
# this value will be a hash value, otherwise put a #
|
|
|
|
|
# plaintext password in this value. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# host - Hosts of client allowed to oper-up. #
|
2007-10-03 17:30:03 +00:00
|
|
|
# wildcards accepted, separate multiple hosts with a #
|
2007-09-24 01:14:52 +00:00
|
|
|
# space. You may also specify CIDR IP addresses. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# fingerprint - When using the m_ssl_oper_cert.so module, you may #
|
2007-07-16 17:30:04 +00:00
|
|
|
# specify a key fingerprint here. This can be obtained #
|
|
|
|
|
# using the /fingerprint command whilst the module is #
|
|
|
|
|
# loaded, or from the notice given to you when you #
|
|
|
|
|
# connect to the ircd using a client certificate, #
|
|
|
|
|
# and will lock this oper block to only the user who #
|
|
|
|
|
# has that specific key/certificate pair. #
|
2007-09-24 01:14:52 +00:00
|
|
|
# this enhances security a great deal, however it #
|
2007-07-16 17:30:04 +00:00
|
|
|
# requires that opers use clients which can send ssl #
|
|
|
|
|
# client certificates, if this is configured for that #
|
|
|
|
|
# oper. Note that if the m_ssl_oper.so module is not #
|
|
|
|
|
# loaded, and/or one of m_ssl_openssl or m_ssl_gnutls #
|
|
|
|
|
# is not loaded, this configuration option has no #
|
|
|
|
|
# effect and will be ignored. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# type - Defines the kind of operator. This must match a type #
|
2007-07-16 17:30:04 +00:00
|
|
|
# tag you defined above, and is case sensitive. #
|
|
|
|
|
# #
|
|
|
|
|
# Syntax is as follows: #
|
|
|
|
|
# <oper name="login" #
|
|
|
|
|
# password="pass" #
|
|
|
|
|
# host="hostmask@of.oper" #
|
2007-09-24 01:14:52 +00:00
|
|
|
# fingerprint="hexsequence" #
|
2007-07-16 17:30:04 +00:00
|
|
|
# type="oper type"> #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<oper name="Brain"
|
|
|
|
|
password="s3cret"
|
|
|
|
|
host="ident@dialup15.isp.com *@localhost *@server.com *@3ffe::0/16"
|
|
|
|
|
type="NetAdmin">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#- SERVER LINK CONFIGURATION -#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# Defines which servers can link to this one, and which servers this #
|
|
|
|
|
# server may create outbound links to. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# name - The name is the canonical name of the server, does #
|
2007-07-16 17:30:04 +00:00
|
|
|
# not have to resolve - but it is expected to be set #
|
|
|
|
|
# in the remote servers connection info. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# ipaddr - Valid host or IP address for remote server. These #
|
2007-07-16 17:30:04 +00:00
|
|
|
# hosts are resolved on rehash, and cached, if you #
|
2007-09-24 01:14:52 +00:00
|
|
|
# specify a hostname; so if you find that your server #
|
2007-07-16 17:30:04 +00:00
|
|
|
# is still trying to connect to an old IP after you #
|
2007-10-03 17:30:03 +00:00
|
|
|
# have updated your DNS, try rehashing and then #
|
2007-07-16 17:30:04 +00:00
|
|
|
# attempting the connect again. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# port - The TCP port for the remote server. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# sendpass - Password to send to create an outbound connection #
|
2007-07-16 17:30:04 +00:00
|
|
|
# to this server. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# recvpass - Password to receive to accept an inbound connection #
|
2007-07-16 17:30:04 +00:00
|
|
|
# from this server. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# autoconnect - Sets the server to autoconnect. Where x is the num. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# (optional) of seconds between attempts. e.g. 300 = 5 minutes. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# transport - If defined, this is a transport name implemented by #
|
2007-07-16 17:30:04 +00:00
|
|
|
# another module. Transports are layers on top of #
|
|
|
|
|
# plaintext connections, which alter them in certain #
|
|
|
|
|
# ways. Currently the three supported transports are #
|
|
|
|
|
# 'openssl' and 'gnutls' which are types of SSL #
|
|
|
|
|
# encryption, and 'zip' which is for compression. #
|
|
|
|
|
# If you define a transport, both ends of the #
|
|
|
|
|
# connection must use a compatible transport for the #
|
|
|
|
|
# link to succeed. OpenSSL and GnuTLS are link- #
|
|
|
|
|
# compatible with each other. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# statshidden - When using m_spanningtree.so for linking. you may #
|
2007-07-16 17:30:04 +00:00
|
|
|
# set this to 'yes', and if you do, the IP address/ #
|
|
|
|
|
# hostname of this connection will NEVER be shown to #
|
2007-09-24 01:14:52 +00:00
|
|
|
# any opers on the network. In /stats c its address #
|
2007-07-16 17:30:04 +00:00
|
|
|
# will show as *@<hidden>, and during CONNECT and #
|
2007-09-24 01:14:52 +00:00
|
|
|
# inbound connections, it's IP will show as <hidden> #
|
2007-07-16 17:30:04 +00:00
|
|
|
# UNLESS the connection fails (e.g. due to a bad #
|
|
|
|
|
# password or servername) #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# allowmask - When this is defined, it indicates a range of IP #
|
2007-07-16 17:30:04 +00:00
|
|
|
# addresses to allow for this link (You may use CIDR #
|
|
|
|
|
# or wildcard form for this address). #
|
|
|
|
|
# e.g. if your server is going to connect to you from #
|
|
|
|
|
# the range 1.2.3.1 through 1.2.3.255, put 1.2.3.0/24 #
|
|
|
|
|
# into this value. If it is not defined, then only #
|
|
|
|
|
# the ipaddr field of the server shall be allowed. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# failover - If you define this option, it must be the name of a #
|
2007-07-16 17:30:04 +00:00
|
|
|
# different link tag in your configuration. This #
|
|
|
|
|
# option causes the ircd to attempt a connection to #
|
|
|
|
|
# the failover link in the event that the connection #
|
|
|
|
|
# to this server fails. For example, you could define #
|
|
|
|
|
# two hub uplinks to a leaf server, and set an #
|
|
|
|
|
# american server to autoconnect, with a european #
|
|
|
|
|
# hub as its failover. In this situation, your ircd #
|
|
|
|
|
# will only try the link to the european hub if the #
|
|
|
|
|
# american hub is unreachable. NOTE that for the #
|
|
|
|
|
# intents and purposes of this option, an unreachable #
|
|
|
|
|
# server is one which DOES NOT ANSWER THE CONNECTION. #
|
|
|
|
|
# If the server answers the connection with accept(), #
|
|
|
|
|
# EVEN IF THE CREDENTIALS ARE INVALID, the failover #
|
|
|
|
|
# link will not be tried! Failover settings will also #
|
|
|
|
|
# apply to autoconnected servers as well as manually #
|
|
|
|
|
# connected ones. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# timeout - If this is defined, then outbound connections will #
|
2007-07-16 17:30:04 +00:00
|
|
|
# time out if they are not connected within this many #
|
|
|
|
|
# seconds. If this is not defined, the default of ten #
|
|
|
|
|
# seconds is used. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# bind - If you specify this value, then when creating an #
|
2007-07-16 17:30:04 +00:00
|
|
|
# outbound connection to the given server, the IP you #
|
|
|
|
|
# place here will be bound to. This is for multi- #
|
|
|
|
|
# homed servers which may have multiple IP addresses. #
|
2007-09-24 01:14:52 +00:00
|
|
|
# if you do not define this value, the first IP that #
|
2007-07-16 17:30:04 +00:00
|
|
|
# is not empty or localhost from your <bind> tags #
|
|
|
|
|
# will be bound to. This is usually acceptable, #
|
|
|
|
|
# however if your server has multiple network cards #
|
|
|
|
|
# then you may have to manually specify the bind #
|
|
|
|
|
# value instead of leaving it to automatic binding. #
|
2007-09-24 01:14:52 +00:00
|
|
|
# you can usually tell if you need to set this by #
|
2007-07-16 17:30:04 +00:00
|
|
|
# looking for the error 'Could not assign requested #
|
|
|
|
|
# address' in your log when connecting to servers. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# hidden - If this is set to true, yes, or 1, then the server #
|
2007-07-16 17:30:04 +00:00
|
|
|
# is completely hidden from non-opers. It does not #
|
2007-09-24 01:14:52 +00:00
|
|
|
# show in /links and it does not show in /map. Also, #
|
2007-07-16 17:30:04 +00:00
|
|
|
# any servers which are child servers of this one #
|
|
|
|
|
# in the network will *also* be hidden. Use with #
|
|
|
|
|
# care! You can use this to 'mask off' sections of #
|
|
|
|
|
# the network so that users only see a small portion #
|
|
|
|
|
# of a much larger net. It should NOT be relied upon #
|
|
|
|
|
# as a security tool, unless it is being used for #
|
|
|
|
|
# example to hide a non-client hub, for which clients #
|
|
|
|
|
# do not have an IP address or resolvable hostname. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# To u:line a server (give it extra privileges required for running #
|
2007-07-16 17:30:04 +00:00
|
|
|
# services, Q, etc) you must include the <uline server> tag as shown #
|
|
|
|
|
# in the example below. You can have as many of these as you like. #
|
|
|
|
|
# #
|
|
|
|
|
# WARNING: Unlike other ircds, u:lining a server allows ALL users on #
|
|
|
|
|
# that server to operoverride modes. This should only be used for #
|
|
|
|
|
# services and protected oper servers! #
|
|
|
|
|
# #
|
|
|
|
|
# ------------------------------------------------------------------- #
|
|
|
|
|
# #
|
2007-09-24 01:14:52 +00:00
|
|
|
# NOTE: If you have built your server as an IPv6 server, then when a #
|
|
|
|
|
# DNS lookup of a server's host occurs, AAAA records (IPv6) are #
|
2007-10-03 06:27:26 +00:00
|
|
|
# prioritised over A records (IPv4). Therefore, if the server you are #
|
2007-09-24 01:14:52 +00:00
|
|
|
# connecting to has both an IPv6 IP address and an IPv4 IP address in #
|
|
|
|
|
# its DNS entry, the IPv6 address will *always* be selected. To #
|
|
|
|
|
# change this behaviour simply specify the IPv4 IP address rather #
|
2007-07-16 17:30:04 +00:00
|
|
|
# than the hostname of the server. #
|
|
|
|
|
# #
|
|
|
|
|
# ------------------------------------------------------------------- #
|
|
|
|
|
# #
|
|
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# If you want to link servers to InspIRCd you must load the #
|
2007-09-24 01:14:52 +00:00
|
|
|
# m_spanningtree.so module! Please see the modules list below for #
|
2007-07-16 17:30:04 +00:00
|
|
|
# information on how to load this module! If you do not load this #
|
|
|
|
|
# module, server links will NOT work! #
|
|
|
|
|
# #
|
|
|
|
|
# Also, if you define any transports, you must load the modules for #
|
|
|
|
|
# these transports BEFORE you load m_spanningtree, e.g. place them #
|
|
|
|
|
# above it in the configuration file. Currently this means the three #
|
|
|
|
|
# modules m_ssl_gnutls, m_ziplinks and m_ssl_openssl, depending on #
|
|
|
|
|
# which you choose to use. #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<link name="hub.penguin.org"
|
|
|
|
|
ipaddr="penguin.box.com"
|
|
|
|
|
port="7000"
|
|
|
|
|
allowmask="69.58.44.0/24"
|
|
|
|
|
autoconnect="300"
|
|
|
|
|
failover="hub.other.net"
|
|
|
|
|
timeout="15"
|
|
|
|
|
transport="gnutls"
|
|
|
|
|
bind="1.2.3.4"
|
|
|
|
|
statshidden="no"
|
|
|
|
|
hidden="no"
|
|
|
|
|
sendpass="outgoing!password"
|
|
|
|
|
recvpass="incoming!password">
|
|
|
|
|
|
|
|
|
|
<link name="services.antarctic.com"
|
|
|
|
|
ipaddr="localhost"
|
|
|
|
|
port="7000"
|
|
|
|
|
allowmask="127.0.0.0/8"
|
|
|
|
|
sendpass="penguins"
|
|
|
|
|
recvpass="polarbears">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#- ULINES CONFIGURATION #-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# This tag defines a ulined server. A U-Lined server has special #
|
|
|
|
|
# permissions, and should be used with caution. Services servers are #
|
|
|
|
|
# usually u-lined in this manner. #
|
|
|
|
|
# #
|
2007-10-03 05:16:01 +00:00
|
|
|
# The 'silent' value, if set to yes, indicates that this server should#
|
2007-07-16 17:30:04 +00:00
|
|
|
# not generate quit and connect notices, which can cut down on noise #
|
|
|
|
|
# to opers on the network. #
|
|
|
|
|
# #
|
|
|
|
|
<uline server="services.antarctic.com" silent="yes">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#- MISCELLANEOUS CONFIGURATION -#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# These options let you define the path to your motd and rules #
|
|
|
|
|
# files. If these are relative paths, they are relative to the #
|
2007-10-03 06:57:40 +00:00
|
|
|
# configuration directory. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<files motd="inspircd.motd.example"
|
|
|
|
|
rules="inspircd.rules.example">
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-# MAXIMUM CHANNELS -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This optional configuration tag lets you define the maximum number #
|
|
|
|
|
# of channels that both opers and users may be on at any one time. #
|
2007-10-03 05:16:01 +00:00
|
|
|
# The default is 20 for users and 60 for opers if this tag is not #
|
2007-07-16 17:30:04 +00:00
|
|
|
# defined. Remote users are not restricted in any manner. #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<channels users="20"
|
|
|
|
|
opers="60">
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#-# DNS SERVER -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# Define your DNS server address here. InspIRCd has its own resolver. #
|
2007-10-03 05:16:01 +00:00
|
|
|
# If you do not define this value, then InspIRCd will attempt to #
|
2007-07-16 17:30:04 +00:00
|
|
|
# determine your DNS server from your operating system. On POSIX #
|
|
|
|
|
# platforms, InspIRCd will read /etc/resolv.conf, and populate this #
|
|
|
|
|
# value with the first DNS server address found. On Windows platforms #
|
|
|
|
|
# InspIRCd will check the registry, and use the DNS server of the #
|
|
|
|
|
# first active network interface, if one exists. #
|
|
|
|
|
# If a DNS server cannot be determined from these checks, the default #
|
|
|
|
|
# value '127.0.0.1' is used instead. The timeout value is in seconds. #
|
|
|
|
|
# #
|
|
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# When choosing a server, be sure to choose one which will do a #
|
|
|
|
|
# RECURSIVE LOOKUP. InspIRCd's resolver does not currently do these #
|
2007-10-03 05:16:01 +00:00
|
|
|
# recursive lookups itself, to save time and resources. The DNS #
|
2007-07-16 17:30:04 +00:00
|
|
|
# server recommended by the InspIRCd team is bind, available from the #
|
|
|
|
|
# ISC website. If your DNS server does not do a recursive lookup, you #
|
|
|
|
|
# will be able to notice this by the fact that none of your users are #
|
|
|
|
|
# resolving even though the DNS server appears to be up! Most ISP and #
|
|
|
|
|
# hosting provider DNS servers support recursive lookups. #
|
|
|
|
|
# #
|
|
|
|
|
# ------------------------------------------------------------------- #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# NOTE: If you have built InspIRCd with IPv6 support, then both #
|
2007-10-03 05:16:01 +00:00
|
|
|
# IPv6 and IPv4 addresses are allowed here, and also in the system #
|
|
|
|
|
# resolv.conf file. Remember that an IPv4 DNS server can still #
|
|
|
|
|
# resolve IPv6 addresses, and vice versa. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<dns server="127.0.0.1" timeout="5">
|
|
|
|
|
|
2007-10-03 05:16:01 +00:00
|
|
|
# An example of using an IPv6 nameserver
|
2007-07-16 17:30:04 +00:00
|
|
|
#<dns server="::1" timeout="5">
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#-# PID FILE -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# Define the path to the PID file here. The PID file can be used to #
|
|
|
|
|
# rehash the ircd from the shell or to terminate the ircd from the #
|
2007-10-03 05:16:01 +00:00
|
|
|
# shell using shell scripts, perl scripts, etc... and to monitor the #
|
2007-07-16 17:30:04 +00:00
|
|
|
# ircd's state via cron jobs. If this is a relative path, it will be #
|
|
|
|
|
# relative to the configuration directory, and if it is not defined, #
|
|
|
|
|
# the default of 'inspircd.pid' is used. #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
#<pid file="/path/to/inspircd.pid">
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#- BANLIST LIMITS #-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
2007-10-03 06:27:26 +00:00
|
|
|
# Use these tags to customise the ban limits on a per channel basis. #
|
2007-10-03 05:16:01 +00:00
|
|
|
# The tags are read from top to bottom, and any tag found which #
|
2007-07-16 17:30:04 +00:00
|
|
|
# matches the channels name applies the banlimit to that channel. #
|
|
|
|
|
# It is advisable to put an entry with the channel as '*' at the #
|
|
|
|
|
# bottom of the list. If none are specified or no maxbans tag is #
|
|
|
|
|
# matched, the banlist size defaults to 64 entries. #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<banlist chan="#morons" limit="128">
|
|
|
|
|
<banlist chan="*" limit="69">
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#- DISABLED COMMANDS -#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This tag is optional, and specifies one or more commands which are #
|
|
|
|
|
# not available to non-operators. For example you may wish to disable #
|
|
|
|
|
# NICK and prevent non-opers from changing their nicknames. #
|
|
|
|
|
# Note that any disabled commands take effect only after the user has #
|
|
|
|
|
# 'registered' (e.g. after the initial USER/NICK/PASS on connection) #
|
|
|
|
|
# so for example disabling NICK will not cripple your network. #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
#<disabled commands="TOPIC MODE">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#-#- RTFM LINE -#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# Just remove this... Its here to make you read ALL of the config #
|
|
|
|
|
# file options ;) #
|
|
|
|
|
|
|
|
|
|
<die value="You should probably edit your config *PROPERLY* and try again.">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#- SERVER OPTIONS -#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
2008-04-01 13:53:27 +00:00
|
|
|
# Settings to define which features are usable on your server. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# prefixquit - A prefix to be placed on the start of a client's #
|
|
|
|
|
# quit message #
|
|
|
|
|
# #
|
|
|
|
|
# suffixquit - A suffix to be placed on the end of a client's #
|
|
|
|
|
# quit message. #
|
|
|
|
|
# #
|
|
|
|
|
# fixedquit - A fixed quit message to display for all client #
|
|
|
|
|
# QUITS. If specified, overrides both prefixquit #
|
|
|
|
|
# and suffixquit options. #
|
|
|
|
|
# #
|
2008-01-10 11:49:15 +00:00
|
|
|
# prefixpart - A prefix to be placed on the start of a client's #
|
|
|
|
|
# part message #
|
|
|
|
|
# #
|
|
|
|
|
# suffixpart - A suffix to be placed on the end of a client's #
|
|
|
|
|
# part message. #
|
|
|
|
|
# #
|
|
|
|
|
# fixedpart - A fixed part message to display for all client #
|
|
|
|
|
# parts. If specified, overrides both prefixpart #
|
|
|
|
|
# and suffixpart options. #
|
|
|
|
|
# #
|
2008-02-01 21:09:21 +00:00
|
|
|
# allowhalfop - Allows the +h channel mode #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# noservices - If noservices is true, yes, or 1, then the first #
|
|
|
|
|
# user into a channel gets founder status. This is #
|
|
|
|
|
# only useful on networks running the m_chanprotect #
|
|
|
|
|
# module without services. #
|
|
|
|
|
# #
|
2008-04-01 13:53:27 +00:00
|
|
|
# qprefix - qprefix is used by the chanprotect module to give #
|
|
|
|
|
# a visible prefix to users set +q (founder) in chan #
|
|
|
|
|
# It should be set to something sensible like ~ or ! #
|
|
|
|
|
# If not set, no prefix is applied to users with +q #
|
|
|
|
|
# #
|
|
|
|
|
# aprefix - aprefix is the same as qprefix, except it is for #
|
|
|
|
|
# giving users with mode +a (protected) a prefix #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# deprotectself - If this value is set to yes, true, or 1, then any #
|
|
|
|
|
# user with +q or +a may remove the +q or +a from #
|
|
|
|
|
# themselves. The default setting is to not enable #
|
|
|
|
|
# this feature, which stops even the founder taking #
|
|
|
|
|
# away their founder status without using services. #
|
|
|
|
|
# #
|
|
|
|
|
# deprotectothers-If this value is set to yes, true, or 1, then any #
|
|
|
|
|
# user with +q or +a may remove the +q or +a from #
|
|
|
|
|
# other users. The default setting is to not enable #
|
|
|
|
|
# this feature, so that only +q may remove +a, and #
|
|
|
|
|
# nothing but services may remove +q. #
|
|
|
|
|
# #
|
|
|
|
|
# cyclehosts - If this is set to true, yes or 1, then when a #
|
|
|
|
|
# user's hostname changes, they will appear to quit #
|
|
|
|
|
# and then rejoin with their new host. This prevents #
|
|
|
|
|
# clients from being confused by host changes, #
|
|
|
|
|
# especially in the case of bots, and it is #
|
|
|
|
|
# recommended that this option is enabled. #
|
|
|
|
|
# #
|
|
|
|
|
# moduledir - This optional value indicates a runtime change of #
|
|
|
|
|
# the location where modules are to be found. This #
|
|
|
|
|
# does not add a supplementary directory. There can #
|
|
|
|
|
# only be one module path. #
|
|
|
|
|
# #
|
2007-10-06 04:15:17 +00:00
|
|
|
# syntaxhints - If set to yes, true or 1, when a user does not #
|
|
|
|
|
# give enough parameters for a command, a syntax #
|
2007-07-16 17:30:04 +00:00
|
|
|
# hint will be given (using the RPL_TEXT numeric) #
|
|
|
|
|
# as well as the standard ERR_NEEDMOREPARAMS. #
|
|
|
|
|
# #
|
2008-02-01 03:47:41 +00:00
|
|
|
# announcets - If this value is defined to yes, true, or 1, then #
|
|
|
|
|
# a channels' timestamp is updated, the users on #
|
2007-10-06 04:15:17 +00:00
|
|
|
# the channel will be informed of the change via #
|
2007-07-16 17:30:04 +00:00
|
|
|
# a server notice to the channel with the old and #
|
|
|
|
|
# new TS values in the timestamp. If you think this #
|
|
|
|
|
# is just pointless noise, define the value to 0. #
|
|
|
|
|
# #
|
|
|
|
|
# ircumsgprefix - Use undernet style message prefix for channel #
|
|
|
|
|
# NOTICE and PRIVMSG adding the prefix to the line #
|
|
|
|
|
# of text sent out. Eg. NOTICE @#test :@ testing #
|
|
|
|
|
# vs. the off setting: NOTICE @#test :testing #
|
|
|
|
|
# #
|
|
|
|
|
# hostintopic - If this is set to yes (the default) then the full #
|
|
|
|
|
# nick!user@host is shown for who set a TOPIC last. #
|
|
|
|
|
# if set to no, then only the nickname is shown. #
|
|
|
|
|
# #
|
2007-08-07 21:44:44 +00:00
|
|
|
# serverpingfreq- This value, when set, allows you to change the #
|
|
|
|
|
# frequency of server to server PING messages. This #
|
|
|
|
|
# can help if you are having certain network issues. #
|
|
|
|
|
# #
|
2007-07-16 17:30:04 +00:00
|
|
|
# pingwarning - This should be set to a number between 1 and 59 if #
|
|
|
|
|
# defined, and if it is defined will cause the server#
|
|
|
|
|
# to send out a warning via snomask +l if a server #
|
|
|
|
|
# does not answer to PING after this many seconds. #
|
|
|
|
|
# This can be useful for finding servers which are #
|
|
|
|
|
# at risk of pinging out due to network issues. #
|
|
|
|
|
# #
|
|
|
|
|
# exemptchanops - This option allows channel operators to be exempted#
|
|
|
|
|
# from certain channel modes. #
|
2007-08-05 22:03:24 +00:00
|
|
|
# Supported modes are +SfFgNc. Defaults to off. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# defaultmodes - The default modes to be given to each channel on #
|
|
|
|
|
# creation. Defaults to 'nt'. There should be no + #
|
|
|
|
|
# or - symbols in this sequence, if you add them #
|
|
|
|
|
# they will be ignored. You may add parameters for #
|
2007-10-03 17:30:03 +00:00
|
|
|
# modes which take them. #
|
2007-07-16 17:30:04 +00:00
|
|
|
# #
|
|
|
|
|
# moronbanner - The NOTICE to show to users who are glined, zlined #
|
|
|
|
|
# klined or qlined when they are disconnected. This #
|
|
|
|
|
# is totally freeform, you may place any text here #
|
|
|
|
|
# you wish. #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<options prefixquit="Quit: "
|
2008-04-11 20:54:15 +00:00
|
|
|
suffixquit=""
|
2008-01-10 11:49:15 +00:00
|
|
|
prefixpart="\""
|
|
|
|
|
suffixpart="\""
|
2007-07-16 17:30:04 +00:00
|
|
|
noservices="no"
|
2008-04-11 20:54:15 +00:00
|
|
|
qprefix="~"
|
|
|
|
|
aprefix="&"
|
2007-07-16 17:30:04 +00:00
|
|
|
deprotectself="no"
|
|
|
|
|
deprotectothers="no"
|
|
|
|
|
syntaxhints="no"
|
|
|
|
|
cyclehosts="yes"
|
|
|
|
|
ircumsgprefix="no"
|
|
|
|
|
announcets="yes"
|
|
|
|
|
hostintopic="yes"
|
|
|
|
|
pingwarning="15"
|
2008-04-11 23:12:57 +00:00
|
|
|
serverpingfreq="60"
|
2007-07-16 17:30:04 +00:00
|
|
|
allowhalfop="yes"
|
2008-04-11 23:12:57 +00:00
|
|
|
defaultmodes="nt"
|
|
|
|
|
moronbanner="You're banned! Email haha@abuse.com with the ERROR line below for help."
|
|
|
|
|
exemptchanops="">
|
2007-07-16 17:30:04 +00:00
|
|
|
|
2008-04-14 20:14:56 +00:00
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-# PERFORMANCE CONFIGURATION #-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# maxwho - The maximum number of results returned by a /WHO #
|
|
|
|
|
# query. This is to prevent /WHO being used as a #
|
|
|
|
|
# spam vector or means of flooding an ircd. The #
|
|
|
|
|
# default is 128, it is not recommended to raise it #
|
|
|
|
|
# above 1024. Values up to 65535 are permitted. If #
|
|
|
|
|
# this value is omitted, any size WHO is allowed by #
|
|
|
|
|
# anyone. #
|
|
|
|
|
# #
|
|
|
|
|
# somaxconn - The maximum number of sockets that may be waiting #
|
|
|
|
|
# in the accept queue. This usually allows the ircd #
|
|
|
|
|
# to soak up more connections in a shorter space of #
|
|
|
|
|
# time when increased but please be aware there is a #
|
|
|
|
|
# system defined maximum value to this, the same way #
|
|
|
|
|
# there is a system defined maximum number of file #
|
|
|
|
|
# descriptors. Some systems may only allow this to #
|
|
|
|
|
# be up to 5 (ugh) while others such as FreeBSD will #
|
|
|
|
|
# default to a much nicer 128. #
|
|
|
|
|
# #
|
|
|
|
|
# softlimit - This optional feature allows a defined softlimit. #
|
|
|
|
|
# if defined sets a soft maxconnections value, has #
|
|
|
|
|
# to be less than the ./configure maxclients #
|
|
|
|
|
# #
|
|
|
|
|
# nouserdns - If set to yes, true or 1, no user DNS lookups #
|
|
|
|
|
# will be performed for connecting users. This can #
|
|
|
|
|
# save a lot of resources on very busy IRC servers. #
|
|
|
|
|
# #
|
2008-05-05 01:10:16 +00:00
|
|
|
# quietbursts - When synching or splitting from the network, a #
|
|
|
|
|
# server can generate a lot of connect and quit #
|
|
|
|
|
# snotices to the +C and +Q snomasks. Setting this #
|
|
|
|
|
# value to yes squelches those messages, which can #
|
|
|
|
|
# make them more useful for opers, however it will #
|
|
|
|
|
# degrade their use by certain third party programs #
|
|
|
|
|
# such as BOPM which rely on them to scan users when #
|
|
|
|
|
# a split heals in certain configurations. #
|
|
|
|
|
# #
|
2008-04-14 20:14:56 +00:00
|
|
|
# netbuffersize - Size of the buffer used to receive data from #
|
|
|
|
|
# clients. The ircd may only read() this amount #
|
|
|
|
|
# of text in one go at any time. (OPTIONAL) #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<performance netbuffersize="10240"
|
|
|
|
|
maxwho="128"
|
|
|
|
|
somaxconn="128"
|
|
|
|
|
softlimit="12800"
|
|
|
|
|
quietbursts="yes"
|
|
|
|
|
nouserdns="no">
|
|
|
|
|
|
2008-04-14 19:57:11 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-# SECURITY CONFIGURATION #-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# announceinvites #
|
|
|
|
|
# - If this option is set, then invites are announced #
|
|
|
|
|
# to the channel when a user invites another user. #
|
|
|
|
|
# If you consider this to be unnecessary noise, #
|
|
|
|
|
# set this to 'none'. To announce to all ops, set #
|
|
|
|
|
# this to 'ops' and to announce to all users set the #
|
|
|
|
|
# value to 'all'. #
|
|
|
|
|
# #
|
|
|
|
|
# The value 'dynamic' varies between 'ops' and 'all' #
|
|
|
|
|
# settings depending on if the channel is +i or not. #
|
|
|
|
|
# When the channel is +i, messages go only to ops, #
|
|
|
|
|
# and when the channel is not +i, messages go to #
|
|
|
|
|
# everyone. In short, the messages will go to every #
|
|
|
|
|
# user who has power of INVITE on the channel. This #
|
|
|
|
|
# is the recommended setting. #
|
|
|
|
|
# #
|
|
|
|
|
# disablehmac - If you are linking your InspIRCd to older versions #
|
|
|
|
|
# then you can specify this option and set it to #
|
|
|
|
|
# yes. 1.1.6 and above support HMAC and challenge- #
|
|
|
|
|
# response for password authentication. These can #
|
|
|
|
|
# greatly enhance security of your server to server #
|
|
|
|
|
# connections when you are not using SSL (as is the #
|
|
|
|
|
# case with a lot of larger networks). Linking to #
|
|
|
|
|
# older versions of InspIRCd should not *usually* be #
|
|
|
|
|
# a problem, but if you have problems with HMAC #
|
|
|
|
|
# authentication, this option can be used to turn it #
|
|
|
|
|
# off. #
|
|
|
|
|
# #
|
|
|
|
|
# hidemodes - If this option is enabled, then the listmodes #
|
|
|
|
|
# given (e.g. +eI), will be hidden from users below #
|
|
|
|
|
# halfop. This is not recommended to be set on mode #
|
|
|
|
|
# +b, as it may break some features in popular #
|
|
|
|
|
# clients such as mIRC. #
|
|
|
|
|
# #
|
|
|
|
|
# hidesplits - When set to 'yes', will hide split server names #
|
|
|
|
|
# from non-opers. Non-opers will see '*.net *.split' #
|
|
|
|
|
# instead of the server names in the quit message, #
|
|
|
|
|
# identical to the way IRCu displays them. #
|
|
|
|
|
# #
|
|
|
|
|
# hidebans - When set to 'yes', will hide gline, kline, zline #
|
|
|
|
|
# and qline quit messages from non-opers. For #
|
|
|
|
|
# example, user A who is not an oper will just see #
|
|
|
|
|
# (G-Lined) while user B who is an oper will see the #
|
|
|
|
|
# text (G-Lined: Reason here) instead. #
|
|
|
|
|
# #
|
|
|
|
|
# hidewhois - When defined with a non-empty value, the given #
|
|
|
|
|
# text will be used in place of the user's server #
|
|
|
|
|
# in WHOIS, when a user is WHOISed by a non-oper. #
|
|
|
|
|
# For example, most nets will want to set this to #
|
|
|
|
|
# something like '*.netname.net' to conceal the #
|
|
|
|
|
# actual server the user is on. #
|
|
|
|
|
# #
|
|
|
|
|
# flatlinks - When you are using m_spanningtree.so, and this #
|
|
|
|
|
# value is set to yes, true or 1, /MAP and /LINKS #
|
|
|
|
|
# will be flattened when shown to a non-opers. #
|
|
|
|
|
# #
|
|
|
|
|
# hideulines - When you are using m_spanningtree.so, and this #
|
|
|
|
|
# value is set to yes, true or 1, then U-lined #
|
|
|
|
|
# servers will be hidden in /LINKS and /MAP for non #
|
|
|
|
|
# opers. Please be aware that this will also hide #
|
|
|
|
|
# any leaf servers of a U-lined server, e.g. jupes. #
|
|
|
|
|
# #
|
|
|
|
|
# userstats - The userstats field is optional and specifies #
|
|
|
|
|
# which stats characters in /STATS may be requested #
|
|
|
|
|
# by non-operators. Stats characters in this field #
|
|
|
|
|
# are case sensitive and are allowed to users #
|
|
|
|
|
# independent of if they are in a module or the core #
|
|
|
|
|
# #
|
|
|
|
|
# operspywhois - If this is set then when an IRC operator uses #
|
|
|
|
|
# /WHOIS on a user they will see all channels, even #
|
|
|
|
|
# ones if channels are secret (+s), private (+p) or #
|
|
|
|
|
# if the target user is invisible +i. #
|
|
|
|
|
# #
|
|
|
|
|
# customversion - If you specify this configuration item, and it is #
|
|
|
|
|
# not set to an empty value, then when a user does #
|
|
|
|
|
# a /VERSION command on the ircd, this string will #
|
|
|
|
|
# be displayed as the second portion of the output, #
|
|
|
|
|
# replacing the system 'uname', compile flags and #
|
|
|
|
|
# socket engine/dns engine names. You may use this #
|
|
|
|
|
# to enhance security, or simply for vanity. #
|
|
|
|
|
# #
|
|
|
|
|
# maxtargets - The maxtargets field is optional, and if not #
|
|
|
|
|
# defined, defaults to 20. It indicates the maximum #
|
|
|
|
|
# number of targets which may be given to commands #
|
|
|
|
|
# such as PRIVMSG, KICK etc. #
|
|
|
|
|
# #
|
2008-06-14 23:58:53 +00:00
|
|
|
# hidekills - The hidekills value, if set, replaces the source #
|
|
|
|
|
# of all oper-generated kills to be the given text #
|
|
|
|
|
# to provide anonimity to your opers. #
|
|
|
|
|
# #
|
2008-04-14 19:57:11 +00:00
|
|
|
|
|
|
|
|
<security announceinvites="dynamic"
|
|
|
|
|
hidemodes="eI"
|
|
|
|
|
disablehmac="no"
|
|
|
|
|
hideulines="no"
|
|
|
|
|
flatlinks="no"
|
|
|
|
|
hidewhois=""
|
|
|
|
|
hidebans="no"
|
|
|
|
|
hidekills=""
|
|
|
|
|
hidesplits="no"
|
|
|
|
|
maxtargets="20"
|
|
|
|
|
customversion=""
|
|
|
|
|
operspywhois="no"
|
|
|
|
|
userstats="Pu">
|
|
|
|
|
|
2008-05-25 17:50:44 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-# LIMITS CONFIGURATION #-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This configuration tag defines the maximum sizes of various types #
|
|
|
|
|
# on IRC, such as the maximum length of a channel name, and the #
|
|
|
|
|
# maximum length of a channel. Note that with the exception of the #
|
|
|
|
|
# identmax value all values given here are the exact values you would #
|
|
|
|
|
# expect to see on IRC. This contrasts with the older InspIRCd #
|
|
|
|
|
# releases where these values would be one character shorter than #
|
|
|
|
|
# defined to account for a null terminator on the end of the text. #
|
|
|
|
|
# #
|
|
|
|
|
# The identmax value has special meaning, as it may grow one #
|
|
|
|
|
# character longer than you specify, to accomodate for a ~ character #
|
|
|
|
|
# when m_ident is loaded. #
|
|
|
|
|
# #
|
|
|
|
|
# These values should match network-wide, otherwise you may end up #
|
|
|
|
|
# with desyncs, and confusing your users by being able to use a nick #
|
|
|
|
|
# of a certain length on one server but not on another. Servers will #
|
|
|
|
|
# link with mismatched values, but this is NOT recommended as a long #
|
|
|
|
|
# term measure! #
|
|
|
|
|
# #
|
|
|
|
|
# Values here should be self explanitory: #
|
|
|
|
|
# #
|
2008-05-25 18:00:55 +00:00
|
|
|
# maxnick - The maximum length of a nickname #
|
|
|
|
|
# maxchan - The maximum length of a channel name #
|
|
|
|
|
# maxmodes - The maximum number of parameterized mode changes #
|
2008-05-25 17:50:44 +00:00
|
|
|
# per line #
|
2008-05-25 18:00:55 +00:00
|
|
|
# maxident - The maximum length of an ident/username value #
|
2008-05-25 17:50:44 +00:00
|
|
|
# maxquit - The maximum length of a quit message #
|
|
|
|
|
# maxtopic - The maximum length of a channel topic #
|
|
|
|
|
# maxkick - The maximum length of a kick message #
|
|
|
|
|
# maxgecos - The maximum length of a GECOS (real name) #
|
|
|
|
|
# maxaway - The maximum length of an away message #
|
|
|
|
|
# #
|
|
|
|
|
|
2008-05-25 18:00:55 +00:00
|
|
|
<limits maxnick="31"
|
|
|
|
|
maxchan="64"
|
|
|
|
|
maxmodes="20"
|
|
|
|
|
maxident="11"
|
2008-05-25 17:50:44 +00:00
|
|
|
maxquit="255"
|
|
|
|
|
maxtopic="307"
|
|
|
|
|
maxkick="255"
|
|
|
|
|
maxgecos="128"
|
|
|
|
|
maxaway="200">
|
|
|
|
|
|
|
|
|
|
|
2008-04-04 16:26:09 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# Logging
|
2008-04-05 02:39:26 +00:00
|
|
|
# -------
|
|
|
|
|
#
|
2008-04-04 16:26:09 +00:00
|
|
|
# Logging is covered with the <log> tag, which you may use to change
|
|
|
|
|
# the behaviour of the logging of the IRCd.
|
|
|
|
|
#
|
|
|
|
|
# In InspIRCd as of 1.2, logging is pluggable and very extensible.
|
|
|
|
|
# Different files can log the same thing, different 'types' of log can
|
|
|
|
|
# go to different places, and modules can even extend the log tag
|
|
|
|
|
# to do what they want.
|
|
|
|
|
#
|
|
|
|
|
# An example log tag would be:
|
|
|
|
|
# <log method="file" type="OPER" level="default" target="opers.log">
|
|
|
|
|
# which would log all information on /oper (failed and successful) to
|
|
|
|
|
# a file called opers.log.
|
|
|
|
|
#
|
|
|
|
|
# There are many different types which may be used, and modules may
|
|
|
|
|
# generate their own. A list of useful types:
|
|
|
|
|
# - USERS - information relating to user connection and disconnection
|
|
|
|
|
# - CHANNELS - information relating to joining and parting of channels.
|
|
|
|
|
# XXX someone doc more on this
|
|
|
|
|
#
|
|
|
|
|
# You may also log *everything* by using a type of *, and subtract things out
|
|
|
|
|
# of that by using -TYPE - for example "* -USERINPUT -USEROUTPUT".
|
|
|
|
|
#
|
|
|
|
|
# Channel Logging
|
2008-04-05 02:39:26 +00:00
|
|
|
# ---------------
|
|
|
|
|
#
|
|
|
|
|
# I'm aware this would probably better belong in the modules section, but this
|
|
|
|
|
# is heavily interrelated to logging, and as such will be documented here.
|
2008-04-04 16:26:09 +00:00
|
|
|
#
|
|
|
|
|
# m_chanlog is one of the modules which can alter logging to it's own thing.
|
|
|
|
|
# An example of this may be:
|
2008-04-05 02:39:26 +00:00
|
|
|
#
|
2008-04-04 16:26:09 +00:00
|
|
|
#<module name="m_chanlog.so">
|
2008-04-05 02:39:26 +00:00
|
|
|
#<log method="channel" type="OPER USERS CHANNELS" level="default" target="#services">
|
2008-04-04 16:26:09 +00:00
|
|
|
#
|
|
|
|
|
# The following log tag is highly default and uncustomised. It is recommended you
|
|
|
|
|
# sort out your own log tags. This is just here so you get some output.
|
|
|
|
|
<log method="file" type="* -USERINPUT -USEROUTPUT -m_spanningtree" level="default" target="ircd.log">
|
|
|
|
|
|
2007-07-16 17:30:04 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#- WHOWAS OPTIONS -#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This tag lets you define the behaviour of the /whowas command of #
|
|
|
|
|
# your server. #
|
|
|
|
|
# #
|
|
|
|
|
# groupsize - Controls the maximum entries per nick shown when #
|
|
|
|
|
# performing a /whowas nick. Setting this to 0 dis- #
|
|
|
|
|
# ables whowas completely. #
|
|
|
|
|
# #
|
|
|
|
|
# maxgroups - The maximum number of nickgroups that can be added #
|
|
|
|
|
# to the list. If max is reached, oldest group will #
|
|
|
|
|
# be deleted first like a FIFO. A groupsize of 3 and #
|
|
|
|
|
# a maxgroups of 5000 will allow for 5000 nicks to #
|
|
|
|
|
# be stored with a history of 3, thus giving a total #
|
|
|
|
|
# of 3 * 5000 = 15000 entries. A setting of 0 dis- #
|
|
|
|
|
# ables whowas completely. #
|
|
|
|
|
# #
|
|
|
|
|
# maxkeep - The maximum time a nick is kept in the whowas list #
|
|
|
|
|
# before being pruned. Time may be specified in #
|
|
|
|
|
# seconds, or in the following format: 1y2w3d4h5m6s #
|
|
|
|
|
# meaning one year, two weeks, three days, 4 hours, #
|
|
|
|
|
# 5 minutes and 6 seconds. All fields in this format #
|
|
|
|
|
# are optional. Minimum is 1 hour, if less InspIRCd #
|
|
|
|
|
# will default back to 1 hour. #
|
|
|
|
|
# #
|
|
|
|
|
#<whowas groupsize="10" #
|
|
|
|
|
# maxgroups="100000" #
|
|
|
|
|
# maxkeep="3d"> #
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#- BAN OPTIONS -#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# The ban tags define nick masks, host masks and ip ranges which are #
|
|
|
|
|
# banned from your server. All details in these tags are local to #
|
|
|
|
|
# Your server. #
|
|
|
|
|
# #
|
|
|
|
|
# #
|
|
|
|
|
# badip lines ban an ip range (same as a zline) #
|
|
|
|
|
# #
|
|
|
|
|
# ipmask - The ip range to ban (wildcards possible) #
|
|
|
|
|
# CIDR is supported in the IP mask. #
|
|
|
|
|
# reason - Reason to display when disconnected #
|
|
|
|
|
# #
|
|
|
|
|
# badnick lines ban a nick mask (same as a qline) #
|
|
|
|
|
# #
|
|
|
|
|
# nick - Nick mask to ban (wildcards possible) #
|
|
|
|
|
# reason - Reason to display on /NICK #
|
|
|
|
|
# #
|
|
|
|
|
# badhost lines ban a user@host mask (same as a kline) #
|
|
|
|
|
# #
|
|
|
|
|
# host - ident@hostname (wildcards possible) #
|
|
|
|
|
# If you specify an IP, CIDR is supported. #
|
|
|
|
|
# reason - Reason to display on disconnection #
|
|
|
|
|
# #
|
|
|
|
|
# exception lines define a hostmask that is excempt from [kzg]lines #
|
|
|
|
|
# #
|
|
|
|
|
# host - ident@hostname (wildcards possible) #
|
|
|
|
|
# If you specify an IP, CIDR is supported. #
|
|
|
|
|
# reason - Reason, shown only in /stats e #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<badip ipmask="69.69.69.69" reason="No porn here thanks.">
|
|
|
|
|
|
|
|
|
|
<badnick nick="ChanServ" reason="Reserved For Services">
|
|
|
|
|
<badnick nick="NickServ" reason="Reserved For Services">
|
|
|
|
|
<badnick nick="OperServ" reason="Reserved For Services">
|
|
|
|
|
<badnick nick="MemoServ" reason="Reserved For Services">
|
|
|
|
|
|
|
|
|
|
<badhost host="*@hundredz.n.hundredz.o.1337.kiddies.com" reason="Too many 1337 kiddiots">
|
|
|
|
|
<badhost host="*@localhost" reason="No irc from localhost!">
|
|
|
|
|
<badhost host="*@172.32.0.0/16" reason="This subnet is bad.">
|
|
|
|
|
|
|
|
|
|
<exception host="*@ircop.host.com" reason="Opers hostname">
|
|
|
|
|
|
|
|
|
|
#-#-#-#-#-#-#-#-#-#-#- INSANE BAN OPTIONS -#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# This optional tag allows you to specify how wide a gline, eline, #
|
|
|
|
|
# kline, zline or qline can be before it is forbidden from being #
|
|
|
|
|
# set. By setting hostmasks="yes", you can allow all G, K, E lines, #
|
|
|
|
|
# no matter how many users the ban would cover. This is not #
|
|
|
|
|
# recommended! By setting ipmasks="yes", you can allow all Z lines, #
|
|
|
|
|
# no matter how many users these cover too. Needless to say we #
|
|
|
|
|
# don't recommend you do this, or, set nickmasks="yes", which will #
|
|
|
|
|
# allow any qline. #
|
|
|
|
|
# #
|
|
|
|
|
# The trigger value indicates how wide any mask will be before it is #
|
|
|
|
|
# prevented from being set. The default value is 95.5% if this tag is #
|
|
|
|
|
# not defined in your configuration file, meaning that if your #
|
|
|
|
|
# network has 1000 users, a gline matching over 955 of them will be #
|
|
|
|
|
# prevented from being added. #
|
|
|
|
|
# #
|
|
|
|
|
# Please note that remote servers (and services) are exempt from #
|
|
|
|
|
# these restrictions and expected to enforce their own policies #
|
|
|
|
|
# locally! #
|
|
|
|
|
# #
|
|
|
|
|
|
|
|
|
|
<insane hostmasks="no" ipmasks="no" nickmasks="no" trigger="95.5">
|
|
|
|
|
|
2008-04-13 22:18:36 +00:00
|
|
|
|
2007-07-16 17:30:04 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#- YAWN -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# #
|
|
|
|
|
# You should already know what to do here :) #
|
|
|
|
|
|
|
|
|
|
<die value="User error. Insert new user and press any key. (you didn't edit your config properly.)">
|
|
|
|
|
|
2008-07-12 10:24:19 +00:00
|
|
|
#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# MODULES #-#-#-#-#-#-#-#-#-#-#-#-#-#-#
|
|
|
|
|
# ____ _ _____ _ _ ____ _ _ _ #
|
|
|
|
|
# | _ \ ___ __ _ __| | |_ _| |__ (_)___ | __ )(_) |_| | #
|
|
|
|
|
# | |_) / _ \/ _` |/ _` | | | | '_ \| / __| | _ \| | __| | #
|
|
|
|
|
# | _ < __/ (_| | (_| | | | | | | | \__ \ | |_) | | |_|_| #
|
|
|
|
|
# |_| \_\___|\__,_|\__,_| |_| |_| |_|_|___/ |____/|_|\__(_) #
|
|
|
|
|
# #
|
|
|
|
|
# Well done, you've reached the end of this. #
|
|
|
|
|
# We now suggest you read and edit modules.conf, as modules are what #
|
|
|
|
|
# provide almost all the features of InspIRCd. :) #
|
|
|
|
|
# #
|
|
|
|
|
# The default does nothing -- we include it for simplicity for you. #
|
|
|
|
|
<include file="modules.conf">
|
|
|
|
|
|
2007-07-16 17:30:04 +00:00
|
|
|
|
|
|
|
|
#########################################################################
|
|
|
|
|
# #
|
|
|
|
|
# - InspIRCd Development Team - #
|
|
|
|
|
# http://www.inspircd.org #
|
|
|
|
|
# #
|
|
|
|
|
#########################################################################
|
