* Copyright (C) 2002-2005 ircd-ratbox development team
* Copyright (C) 2005-2006 charybdis development team
*
- * $Id: example.conf 3131 2007-01-21 15:36:31Z jilles $
+ * $Id: example.conf 3582 2007-11-17 21:55:48Z jilles $
*
* See reference.conf for more information.
*/
#loadmodule "extensions/sno_farconnect.so";
#loadmodule "extensions/sno_globalkline.so";
#loadmodule "extensions/sno_globaloper.so";
+#loadmodule "extensions/sno_whois.so";
serverinfo {
name = "hades.arpa";
- use_ts6 = yes;
sid = "42X";
description = "charybdis test server";
network_name = "AthemeNET";
#vhost = "192.169.0.1";
/* for IPv6 */
#vhost6 = "3ffe:80e8:546::2";
+
+ /* max_clients: This should be set to the maximum amount of clients
+ * that the server should support. Note that you should leave some
+ * file descriptors free for log files, server connections, ident
+ * lookups (if enabled), exceed_limit clients, etc.
+ */
+ max_clients = 1024;
};
admin {
* then general access, then restricted.
*/
auth {
- /* user: the user@host allowed to connect. multiple IPv4/IPv6 user
- * lines are permitted per auth block.
+ /* user: the user@host allowed to connect. Multiple IPv4/IPv6 user
+ * lines are permitted per auth block. This is matched against the
+ * hostname and IP address (using :: shortening for IPv6 and
+ * prepending a 0 if it starts with a colon) and can also use CIDR
+ * masks.
*/
user = "*@172.16.0.0/12";
user = "*test@123D:B567:*";
* global_kill: allows local and remote users to be
* /KILL'd (OLD 'O' flag)
* remote: allows remote SQUIT and CONNECT (OLD 'R' flag)
- * kline: allows KILL, KLINE and DLINE (OLD 'K' flag)
+ * kline: allows KLINE and DLINE (OLD 'K' flag)
* unkline: allows UNKLINE and UNDLINE (OLD 'U' flag)
* gline: allows GLINE (OLD 'G' flag)
* nick_changes: allows oper to see nickchanges (OLD 'N' flag)
- * via usermode +n
+ * via snomask +n
* rehash: allows oper to REHASH config (OLD 'H' flag)
* die: allows DIE and RESTART (OLD 'D' flag)
* admin: gives admin privileges. admins
* will not have the admin lines in
* stats p and whois.
* xline: allows use of /quote xline/unxline
- * operwall: allows the oper to send operwalls [DEFAULT]
+ * resv: allows use of /quote resv/unresv [DEFAULT]
+ * operwall: allows the oper to send/receive operwalls [DEFAULT]
* oper_spy: allows 'operspy' features to see through +s
* channels etc. see /quote help operspy
* hidden_oper: hides the oper from /stats p (OLD UMODE +p)
class = "server";
flags = compressed, topicburst;
- /* If the connection is IPv6, uncomment below */
+ /* If the connection is IPv6, uncomment below.
+ * Use 0::1, not ::1, for IPv6 localhost. */
#aftype = ipv6;
};
flags = all, rehash;
};
-/* exempt {}: IPs that are exempt from Dlines. (OLD d:) */
+/* exempt {}: IPs that are exempt from Dlines and rejectcache. (OLD d:) */
exempt {
ip = "127.0.0.1";
};
use_except = yes;
use_knock = yes;
use_forward = yes;
- invite_ops_only = yes;
knock_delay = 5 minutes;
knock_delay_channel = 1 minute;
max_chans_per_user = 15;
/* These are the blacklist settings.
* You can have multiple combinations of host and rejection reasons.
- * They are used in pairs of one host/rejection reason.
+ * They are used in pairs of one host/rejection reason, or multiple hosts/rejection reason.
*
* These settings should be adequate for most networks, and are (presently)
* required for use on AthemeNet.
* Word to the wise: Do not use blacklists like SPEWS for blocking IRC
* connections.
*
- * Note: AHBL (the providers of the below BLs) request that they be
+ * As of charybdis 2.1.3, you can do some keyword substitution on the rejection
+ * reason. The available keyword substitutions are:
+ *
+ * ${ip} - the user's IP
+ * ${host} - the user's canonical hostname
+ * ${dnsbl-host} - the dnsbl hostname the lookup was done against
+ * ${nick} - the user's nickname
+ * ${network-name} - the name of the network
+ *
+ * Note: AHBL (the providers of the below *.ahbl.org BLs) request that they be
* contacted, via email, at admins@2mbit.com before using these BLs.
* See <http://www.ahbl.org/services.php> for more information.
*/
-#blacklist {
+blacklist {
+ host = "dnsbl.dronebl.org";
+ reject_reason = "${nick}, your IP (${ip}) is listed in DroneBL. For assistance, see http://dronebl.org/lookup_branded.do?ip=${ip}&network=${network-name}";
+
# host = "ircbl.ahbl.org";
-# reject_reason = "You have a host listed in the ircbl.ahbl.org blacklist.";
+# reject_reason = "${nick}, your IP (${ip}) is listed in ${dnsbl-host} for having an open proxy. In order to protect ${network-name} from abuse, we are not allowing connections with open proxies to connect.";
#
# host = "tor.ahbl.org";
-# reject_reason = "You are connecting from a TOR exit node.";
-#};
+# reject_reason = "${nick}, your IP (${ip}) is listed as a TOR exit node. In order to protect ${network-name} from tor-based abuse, we are not allowing TOR exit nodes to connect to our network.";
+};
alias "NickServ" {
target = "NickServ";
reject_ban_time = 1 minute;
reject_after_count = 3;
reject_duration = 5 minutes;
+ max_unknown_ip = 2;
};
modules {
projects / irc / rqf / shadowircd.git / blobdiff