trusts: Throttle trusted clients if they disconnect too soon.

[irc/quakenet/newserv.git] / trusts / trusts.h

diff --git a/trusts/trusts.h b/trusts/trusts.h
index 679d794d23ed4e8e0b7a291b0db3cc8d7d8e9bab..88190a82b4b3ac85ec9b115b294af1aec2aedd49 100644 (file)
--- a/trusts/trusts.h
+++ b/trusts/trusts.h
@@ -18,7 +18,7 @@
 
 #define MAXTGEXTS 5
 
-#define MAXTRUSTEDFOR 50000
+#define MAXTRUSTEDFOR 5000
 #define MAXDURATION 365 * 86400 * 20
 #define MAXPERIDENT 1000
 #define MAXPERNODE 1000
@@ -27,9 +27,31 @@
 #define TABLES_MIGRATION 1
 #define TABLES_REPLICATION 2
 
-#define CLEANUP_TH_INACTIVE 30
+#define CLEANUP_TH_INACTIVE 60
 
-#define POLICY_GLINE_DURATION 18
+#define POLICY_GLINE_DURATION 1800
+
+#define POLICY_SUCCESS 0
+#define POLICY_FAILURE_NODECOUNT 1
+#define POLICY_FAILURE_GROUPCOUNT 2
+#define POLICY_FAILURE_IDENTD 3
+#define POLICY_FAILURE_IDENTCOUNT 4
+
+#define DEFAULT_TRUSTPORT 5776
+
+#define TRUST_ENFORCE_IDENT 1 /* This must be 1 for compatibility with O. */
+#define TRUST_NO_CLEANUP 2
+#define TRUST_PROTECTED 4
+#define TRUST_RELIABLE_USERNAME 8
+#define TRUST_UNTHROTTLE 16
+
+#define TRUST_MIN_UNPRIVILEGED_BITS_IPV4 (96 + 20)
+#define TRUST_MIN_UNPRIVILEGED_BITS_IPV6 32
+
+#define TRUST_MIN_UNPRIVILEGED_NODEBITS_IPV4 (96 + 24)
+#define TRUST_MIN_UNPRIVILEGED_NODEBITS_IPV6 48
+
+#define TRUST_MIN_TIME_RETHROTTLE 120
 
 struct trustmigration;
 
@@ -64,7 +86,7 @@ typedef struct trustgroup {
 
   sstring *name;
   unsigned int trustedfor;
-  int mode;
+  int flags;
   unsigned int maxperident;
   unsigned int maxusage;
   time_t expires;
@@ -96,7 +118,6 @@ int trusts_fullyonline(void);
 
 /* formats.c */
 char *trusts_timetostr(time_t);
-char *trusts_cidr2str(struct irc_in_addr *ip, unsigned char);
 char *dumpth(trusthost *, int);
 char *dumptg(trustgroup *, int);
 int parseth(char *, trusthost *, unsigned int *, int);
@@ -168,7 +189,6 @@ void trusts_lostnick(nick *, int);
 
 /* trusts_api.c */
 int istrusted(nick *);
-int trustgline(trustgroup *tg, const char *ident, int duration, const char *reason);
-int trustungline(trustgroup *tg, const char *ident, int duration, const char *reason);
+unsigned char getnodebits(struct irc_in_addr *ip);
 
 #endif