<module name="md5"> <module name="sha256"> <module name="alias"> <alias text="NICKSERV" replace="PRIVMSG NickServ :$2-" requires="NickServ" uline="yes"> <alias text="CHANSERV" replace="PRIVMSG ChanServ :$2-" requires="ChanServ" uline="yes"> <alias text="OPERSERV" replace="PRIVMSG OperServ :$2-" requires="OperServ" uline="yes" operonly="yes"> <alias text="BOTSERV" replace="PRIVMSG BotServ :$2-" requires="BotServ" uline="yes"> <alias text="HOSTSERV" replace="PRIVMSG HostServ :$2-" requires="HostServ" uline="yes"> <alias text="MEMOSERV" replace="PRIVMSG MemoServ :$2-" requires="MemoServ" uline="yes"> <alias text="NS" replace="PRIVMSG NickServ :$2-" requires="NickServ" uline="yes"> <alias text="CS" replace="PRIVMSG ChanServ :$2-" requires="ChanServ" uline="yes"> <alias text="OS" replace="PRIVMSG OperServ :$2-" requires="OperServ" uline="yes" operonly="yes"> <alias text="BS" replace="PRIVMSG BotServ :$2-" requires="BotServ" uline="yes"> <alias text="HS" replace="PRIVMSG HostServ :$2-" requires="HostServ" uline="yes"> <alias text="MS" replace="PRIVMSG MemoServ :$2-" requires="MemoServ" uline="yes"> <alias text="ID" replace="PRIVMSG NickServ :IDENTIFY $2" requires="NickServ" uline="yes"> <module name="banexception"> <module name="banredirect"> <module name="blockcolor"> <module name="callerid"> <callerid maxaccepts="16" operoverride="no" tracknick="no" cooldown="60"> <module name="cap"> <module name="cban"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # CGI:IRC module: Adds support for automatic host changing in CGI:IRC # (http://cgiirc.sourceforge.net). #<module name="cgiirc"> # #-#-#-#-#-#-#-#-#-#-#-# CGIIRC CONFIGURATION #-#-#-#-#-#-#-#-#-#-#-#-# # # Optional - If you specify to use cgiirc, then you must specify one # or more cgihost tags which indicate authorised CGI:IRC servers which # will be connecting to your network, and an optional cgiirc tag. # For more information see: http://wiki.inspircd.org/Modules/cgiirc # # Set to yes if you want to notice opers when CGI clients connect # <cgiirc opernotice="no"> # # The type field indicates where the module should get the real # client's IP address from, for further information, please see the # CGI:IRC documentation. # # Old style: # <cgihost type="pass" mask="www.mysite.com"> # Get IP from PASS # <cgihost type="ident" mask="otherbox.mysite.com"> # Get IP from ident # <cgihost type="passfirst" mask="www.mysite.com"> # See the docs # New style: # <cgihost type="webirc" password="foobar" # mask="somebox.mysite.com"> # Get IP from WEBIRC # # IMPORTANT NOTE: # --------------- # # When you connect CGI:IRC clients, there are two connect classes which # apply to these clients. When the client initially connects, the connect # class which matches the cgi:irc site's host is checked. Therefore you # must raise the maximum local/global clients for this ip as high as you # want to allow cgi clients. After the client has connected and is # determined to be a cgi:irc client, the class which matches the client's # real IP is then checked. You may set this class to a lower value, so that # the real IP of the client can still be restricted to, for example, 3 # sessions maximum. # <module name="chancreate"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Channel names module: Allows disabling channels which have certain # characters in the channel name such as bold, colorcodes, etc. which # can be quite annoying and allow users to on occasion have a channel # that looks like the name of another channel on the network. <module name="channames"> <channames # denyrange: characters or range of characters to deny in channel # names. denyrange="2" # allowrange: characters or range of characters to specifically allow # in channel names. allowrange=""> <module name="channelban"> <module name="chghost"> <hostname charmap="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ.-_/0123456789"> <module name="chgident"> <module name="chgname"> <module name="cloaking"> # #-#-#-#-#-#-#-#-#-#-#- CLOAKING CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-# # # # If you specify the cloaking module as above, you must define # # cloak keys, and optionally a cloak prefix as shown below. The cloak # # keys must be shared across the network for correct cloaking. # # # # There are four methods of cloaking: # # # # half Cloak only the "unique" portion of a host; show # # the last 2 parts of the domain, /16 subnet of IPv4 # # or /48 subnet of the IPv6 address. # # # # full Cloak the users completely, using three slices for # # common CIDR bans (IPv4: /16, /24; IPv6: /48, /64) # # # # These methods use a single key that can be any length of text. # # An optional prefix may be specified to mark cloaked hosts. # # # # The following methods are maintained for backwards compatibility; # # they are slightly less secure, and always hide unresolved IPs # # # # compat-host InspIRCd 1.2-compatible host-based cloaking # # compat-ip InspIRCd 1.2-compatible ip-always cloaking # # # # You must specify key1, key2, key3, key4 for the compat cloaking # # modes; the values must be less than 0x80000000 and should be picked # # at random. Prefix is mandatory, will default to network name if not # # specified, and will always have a "-" appended. # #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # <cloak mode="half" key="secret" prefix="net-"> <module name="close"> <module name="conn_umodes"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Connectban: Provides IP connection throttling. Any IP range that connects # too many times (configurable) in an hour is zlined for a (configurable) # duration, and their count resets to 0. # # ipv4cidr and ipv6cidr allow you to turn the comparison from individual # IP addresses (32 and 128 bits) into CIDR masks, to allow for throttling # over whole ISPs/blocks of IPs, which may be needed to prevent attacks. # #<connectban threshold="10" duration="10m" ipv4cidr="32" ipv6cidr="128"> # This allows for 10 connections in an hour with a 10 minute ban if that is exceeded. # #<module name="connectban"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Connection throttle module. #<module name="connflood"> # #-#-#-#-#-#-#-#-#-#-#- CONTHROTTLE CONFIGURATION -#-#-#-#-#-#-#-#-#-#-# # seconds, maxconns - Amount of connections per <seconds>. # # timeout - Time to wait after the throttle was activated # before deactivating it. Be aware that the time # is seconds + timeout. # # quitmsg - The message that users get if they attempt to # connect while the throttle is active. # # bootwait - Amount of time to wait before enforcing the # throttling when the server just booted. # #<connflood seconds="30" maxconns="3" timeout="30" # quitmsg="Throttled" bootwait="10"> <module name="deaf"> <module name="dnsbl"> <module name="gecosban"> <module name="globalload"> <module name="ident"> <ident timeout="1"> <module name="inviteexception"> <module name="joinflood"> <module name="knock"> <module name="namesx"> <module name="operchans"> <module name="operlog"> <module name="opermodes"> <module name="password_hash"> <module name="permchannels"> <module name="muteban"> <module name="redirect"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Regular expression provider for glob or wildcard (?/*) matching. # You must have at least 1 provider loaded to use the filter or the # rline modules. This module has no additional requirements, as it uses # the matching already present in InspIRCd core. #<module name="regex_glob"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Regular expression provider for PCRE (Perl-Compatible Regular # Expressions). You need libpcre installed to compile and load this # module. You must have at least 1 provider loaded to use the filter or # the rline module. #<module name="regex_pcre"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Regular expression provider for POSIX regular expressions. # You shouldn't need any additional libraries on a POSIX-compatible # system (ie: any Linux, BSD, but not Windows). You must have at least # 1 provider loaded to use the filter or the rline module. # On POSIX-compliant systems, regex syntax can be found by using the # command: 'man 7 regex'. #<module name="regex_posix"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Registered users only channel creation # Allows only registered users and opers to create new channels. # # You probably *DO NOT* want to load this module on a public network. # #<module name="regonlycreate"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # Ban users through regular expression patterns #<module name="rline"> # #-#-#-#-#-#-#-#-#-#-#-#- RLINE CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-#-# # # If you wish to re-check a user when they change nickname (can be # useful under some situations, but *can* also use CPU with more users # on a server) then set the following configuration value: # Also, this is where you set what Regular Expression engine is to be # used. If you ever change it while running, all of your R-Lines will be # wiped. This is the regex engine used by all R-Lines set, and # regex_<engine> must be loaded, or rline will be nonfunctional # until you load it or change the engine to one that is loaded. # #<rline matchonnickchange="yes" engine="pcre"> # # Generally, you will NOT want to use 'glob' here, as this turns # rline into just another gline. The exceptions are that rline will # always use the full nick!user@host realname string, rather than only # user@host, but beware that only the ? and * wildcards are available, # and are the only way to specify where the space can occur if you do # use glob. For this reason, is recommended to use a real regex engine # so that at least \s or [[:space:]] is available. <module name="sasl"> <module name="servprotect"> <module name="services_account"> <module name="sethost"> <module name="serverban"> <module name="showwhois"> <showwhois opersonly="yes" showfromopers="yes"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # SSL channel mode module: Adds support for SSL-only channels via # channel mode +z and the 'z' extban which matches SSL client # certificate fingerprints. # Does not do anything useful without a working SSL module (see below). #<module name="sslmodes"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # GnuTLS SSL module: Adds support for SSL connections using GnuTLS, # if enabled. You must answer 'yes' in ./configure when asked or # manually symlink the source for this module from the directory # src/modules/extra, if you want to enable this, or it will not load. #<module name="ssl_gnutls"> # #-#-#-#-#-#-#-#-#-#-#- GNUTLS CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-# # # # ssl_gnutls is too complex to describe here, see the wiki: # # http://wiki.inspircd.org/Modules/ssl_gnutls # #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # SSL Info module: Allows users to retrieve information about other # user's peer SSL certificates and keys. This can be used by client # scripts to validate users. For this to work, one of ssl_gnutls # or ssl_openssl must be loaded. This module also adds the # "* <user> is using a secure connection" whois line, the ability for # opers to use SSL cert fingerprints to verify their identity and the # ability to force opers to use SSL connections in order to oper up. # It is highly recommended to load this module especially if # you use SSL on your network. # For how to use the oper features, please see the first example <oper> tag # in opers.conf.example. # #<module name="sslinfo"> #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-# # OpenSSL SSL module: Adds support for SSL connections using OpenSSL, # if enabled. You must answer 'yes' in ./configure when asked or symlink # the source for this module from the directory src/modules/extra, if # you want to enable this, or it will not load. #<module name="ssl_openssl"> # #-#-#-#-#-#-#-#-#-#-#- OPENSSL CONFIGURATION -#-#-#-#-#-#-#-#-#-#-#-# # # # ssl_openssl is too complex to describe here, see the wiki: # # http://wiki.inspircd.org/Modules/ssl_openssl # <module name="stripcolor"> <module name="svshold"> <module name="tline"> <module name="uhnames"> <module name="watch"> <watch maxentries="32"> <module name="xline_db"> <module name="spanningtree">