X-Git-Url: https://git.netwichtig.de/gitweb/?a=blobdiff_plain;f=conf%2Finspircd.conf.example;h=e58bd6cdf80a58b9de9a95db88b1d2d5442d8994;hb=c7e2895cbdbbeaf3b8789ef694315577be1a8df3;hp=9d35699b93a561e30244370bcba8846580736ced;hpb=72004ee5715c286c42dc62f278cc2805ea569e39;p=user%2Fhenk%2Fcode%2Finspircd.git

diff --git a/conf/inspircd.conf.example b/conf/inspircd.conf.example
index 9d35699b9..e58bd6cdf 100644
--- a/conf/inspircd.conf.example
+++ b/conf/inspircd.conf.example
@@ -21,7 +21,7 @@
 #             Change the options to suit your network                  #
 #                                                                      #
 #     $Id$
-#								       #
+#                                                                      #
 #    ____                _   _____ _     _       ____  _ _   _         #
 #   |  _ \ ___  __ _  __| | |_   _| |__ (_)___  | __ )(_) |_| |        #
 #   | |_) / _ \/ _` |/ _` |   | | | '_ \| / __| |  _ \| | __| |        #
@@ -57,9 +57,9 @@
 # Syntax is as follows:                                               #
 #<include file="file.conf">                                           #
 #<include executable="/path/to/executable parameters">                #
-#								      #
-# Executable Include Example:					      #
-#<include executable="/usr/bin/wget -O - http://mynet.net/inspircd.conf">
+#                                                                     #
+# Executable Include Example:                                         #
+#<include executable="/usr/bin/wget -q -O - http://mynet.net/inspircd.conf">
 #                                                                     #
 
 
@@ -68,13 +68,20 @@
 #   Here is where you enter the information about your server.        #
 #                                                                     #
 
-<server 
-        # name: Hostname of your server. Does not need to be valid.
+<server
+        # name: Hostname of your server. Does not need to resolve, but
+        # does need to be correct syntax (something.somethingelse.tld).
         name="penguin.omega.org.za"
 
         # description: Server description. Spaces are allowed.
         description="Waddle World"
 
+        # id: The SID to use for this server. This should not be uncommented
+        # unless there is a SID conflict. This must be three characters long.
+        # The first character must be a digit [0-9], the remaining two chars
+        # may be letters [A-Z] or digits.
+        #id="97K"
+
         # network: Network name given on connect to clients.
         # Should be the same on all servers on the network and
         # not contain spaces.
@@ -87,7 +94,7 @@
 #   nick, and email address.                                          #
 #                                                                     #
 
-<admin 
+<admin
        # name: Real Name
        name="Johnny English"
 
@@ -118,32 +125,32 @@
 # PLEASE NOTE: If you have build InspIRCd with IPv6 support, you MUST #
 # specify a bind address if you want the IRCd to bind to a IPv4 IP.   #
 
-<bind 
+<bind
       # address: IP address to bind to if the box that you are hosting
       # on has more than one IP, else the ircd will try to bind to all
-      # IP's on the box if this is not defined
-      address="" 
+      # IP's on the box if this is not defined.
+      address=""
 
-      # port: Port for users and/or servers to be able to connect to.
+      # port: Port for users or servers to be able to connect to.
       # you can select multiple ports by separating them
       # with a - character like the example below.
-      port="6697" 
+      port="6697"
 
       # type: Type of bind block this is. It can either be clients or
       # servers. Whichever you select will be the only type able to connect
       # to this bind section.
-      type="clients" 
+      type="clients"
 
       # ssl: If you want this bind section to use SSL, define either
       # gnutls or openssl here. The appropriate SSL modules must be loaded
       # for ssl to work. If you do not want this bind section to support ssl,
-      # just remove this option.
+      # just remove or comment out this option.
       ssl="gnutls">
 
 <bind address="" port="6660-6669" type="clients">
 
 # When linking servers, the openssl and gnutls transports are largely
-# link-compatible and can be used alongside each other or either/or
+# link-compatible and can be used alongside each other
 # on each end of the link without any significant issues.
 # Transports can only be used on server blocks.
 # Supported Transports are: "zip", "openssl" and "gnutls".
@@ -161,15 +168,22 @@
 #   need this ability should know the die and restart password.       #
 #                                                                     #
 
-<power 
+<power
+       # hash: what hash these passwords are hashed with. requires the module
+       # for selected hash (m_md5.so, m_sha256.so or m_ripemd160.so) be
+       # loaded and the password hashing module (m_password_hash.so)
+       # loaded. Options here are: "md5", "sha256" and "ripemd160".
+       # Optional, but recommended. Create hashed password with:
+       # /mkpasswd <hash> <password>
+       #hash="sha256"
 
-      # diepass: Password for opers to use if they need to shutdown (die)
-      # a server.
-      diepass="" 
+       # diepass: Password for opers to use if they need to shutdown (die)
+       # a server.
+       diepass=""
 
-      # restartpass: Password for opers to use if they need to restart
-      # a server.
-      restartpass="">
+       # restartpass: Password for opers to use if they need to restart
+       # a server.
+       restartpass="">
 
 
 #-#-#-#-#-#-#-#-#-#-  CONNECTIONS CONFIGURATION  -#-#-#-#-#-#-#-#-#-#-#
@@ -179,19 +193,52 @@
 #   You may have as many of these as you require. To allow/deny all   #
 #   connections, use a '*' or 0.0.0.0/0.                              #
 #                                                                     #
+#  -- It is important to note that connect tags are read from the  -- #
+#     TOP DOWN. This means that you should have more specific deny    #
+#    and allow tags at the top, progressively more general, followed  #
+#        by a <connect allow="*" (should you wish to have one).       #
+#                                                                     #
+#                                                                     #
+<connect
+         # deny: Will not let people connect if they have specified host/IP.
+         deny="69.254.*">
+
+<connect deny="3ffe::0/32">
+
+<connect
+         # name: Name to use for this connect block. Mainly used for
+         # connect class inheriting.
+         name="secret"
+
+         # parent: This setting is to specify if this connect class
+         # inherits settings from any other. Put the other class's name
+         # in here to use its settings as a template - for example, if
+	 # you only want to adjust sendq and a password
+         parent="main"
 
-<connect 
          # allow: What IP addresses/hosts to allow for this block.
-         allow="196.12.*"  
+         allow="196.12.*"
+
+         # hash: what hash this password is hashed with. requires the module
+         # for selected hash (m_md5.so, m_sha256.so or m_ripemd160.so) be
+         # loaded and the password hashing module (m_password_hash.so)
+         # loaded. Options here are: "md5", "sha256" and "ripemd160".
+         # Optional, but recommended. Create hashed password with:
+         # /mkpasswd <hash> <password>
+         #hash="sha256"
 
          # password: Password to use for this block/user(s)
-         password="secret" 
+         password="secret"
 
          # port: What port this user is allowed to connect on. (optional)
          # The port MUST be set to listen in the bind blocks above.
          port="6667">
 
-<connect 
+<connect
+         # name: Name to use for this connect block. Mainly used for
+         # connect class inheriting.
+         name="main"
+
          # allow: What IP addresses/hosts to allow for this block.
          allow="*"
 
@@ -205,15 +252,7 @@
          # send /nick, /user or /pass)
          timeout="60"
 
-         # flood: After x lines (flood) in x seconds (see threshold)
-         # the user is disconnected for flooding.
-         flood="20"
-
-         # threshold: In how many seconds can a user flood x lines (see flood)
-         # before they are disconnected for excess flood.
-         threshold="1"
-
-         # pingfreq: How often the server tries to ping connecting clients/servers.
+         # pingfreq: How often (in seconds) the server tries to ping connecting clients.
          pingfreq="120"
 
          # sendq: Amount of data that the server is allowed to send to the user
@@ -229,18 +268,17 @@
          # globalmax: Maximum global (network-wide) connections per IP.
          globalmax="3"
 
+         # useident: Defines if users in this class must respond to a ident query or not.
+         useident="no"
+
          # limit: How many users are allowed in this class
-	 limit="5000"
+         limit="5000"
 
          # modes: Usermodes that are set on users in this block on connect.
          # Enabling this option requires that the m_conn_umodes module be loaded.
          # This entry is highly recommended to use for/with IP Cloaking/masking.
          modes="+x">
 
-<connect 
-        # deny: Will not let people connect if they have specified host/IP.
-        deny="69.254.*">
-<connect deny="3ffe::0/32">
 
 #-#-#-#-#-#-#-#-#-#-#-#-  CIDR CONFIGURATION   -#-#-#-#-#-#-#-#-#-#-#-
 #                                                                     #
@@ -252,17 +290,17 @@
 #                                                                     #
 
 <cidr
-	# ipv4clone: specifies how many bits of an IP address should be
-        # looked at for clones. The default only looks for clones on a
-        # single IP address of a user. You do not want to set this
-        # extremely low. (Values are 0-32).
-        ipv4clone="32"
-
-        # ipv6clone: specifies how many bits of an IP address should be
-        # looked at for clones. The default only looks for clones on a
-        # single IP address of a user. You do not want to set this
-        # extremely low. (Values are 0-128).
-	ipv6clone="128">
+	  # ipv4clone: specifies how many bits of an IP address should be
+      # looked at for clones. The default only looks for clones on a
+      # single IP address of a user. You do not want to set this
+      # extremely low. (Values are 0-32).
+      ipv4clone="32"
+
+      # ipv6clone: specifies how many bits of an IP address should be
+      # looked at for clones. The default only looks for clones on a
+      # single IP address of a user. You do not want to set this
+      # extremely low. (Values are 0-128).
+      ipv6clone="128">
 
 # This file has all the information about oper classes, types and o:lines.
 # You *MUST* edit it.
@@ -275,7 +313,7 @@
 #-#-#-#-#-#-#-#-#-#-  MISCELLANEOUS CONFIGURATION  -#-#-#-#-#-#-#-#-#-#
 #                                                                     #
 
-<files 
+<files
        # motd: Path to your motd file. Path is relative to the conf directory.
        motd="inspircd.motd.example"
 
@@ -285,7 +323,7 @@
 #-#-#-#-#-#-#-#-#-#-#-# MAXIMUM CHANNELS -#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
 #                                                                     #
 
-<channels 
+<channels
           # users: Maximum number of channels a user can be in at once.
           users="20"
 
@@ -296,9 +334,9 @@
 # If these values are not defined, InspIRCd uses the default DNS resolver
 # of your system.
 
-<dns 
+<dns
      # server: DNS server to use to attempt to resolve IP's to hostnames.
-     server="127.0.0.1" 
+     server="127.0.0.1"
 
      # timeout: seconds to wait to try to resolve DNS/hostname.
      timeout="5">
@@ -341,6 +379,9 @@
 # Note that any disabled commands take effect only after the user has #
 # 'registered' (e.g. after the initial USER/NICK/PASS on connection)  #
 # so for example disabling NICK will not cripple your network.        #
+#								      #
+# You can also define if you want to disable any channelmodes         #
+# or usermodes from your users.					      #
 #                                                                     #
 # `fakenonexistant' will make the ircd pretend that nonexistant       #
 # commands simply don't exist to non-opers ("no such command").       #
@@ -362,7 +403,7 @@
 #   Settings to define which features are usable on your server.      #
 #                                                                     #
 
-<options 
+<options
          # prefixquit: What (if anything) a users' quit message
          # should be prefixed with.
          prefixquit="Quit: "
@@ -380,8 +421,8 @@
          suffixpart="\""
 
          # syntaxhints: If enabled, if a user fails to send the correct parameters
-         # for a command, the ircd will give back soome help text of what
-         # the correct parameters are
+         # for a command, the ircd will give back some help text of what
+         # the correct parameters are.
          syntaxhints="no"
 
          # cyclehosts: If enabled, when a user gets a host set, it will cycle
@@ -391,7 +432,7 @@
 
          # ircumsgprefix: Use undernet-style message prefixing for NOTICE and
          # PRIVMSG. If enabled, it will add users' prefix to the line, if not,
-         # it will just message the user.
+         # it will just message the user normally.
          ircumsgprefix="no"
 
          # announcets: If set to yes, when the TS on a channel changes, all users
@@ -428,13 +469,13 @@
 
          # invitebypassmodes: This allows /invite to bypass other channel modes.
          # (Such as +k, +j, +l, etc)
-	 invitebypassmodes="yes">
+         invitebypassmodes="yes">
 
 
 #-#-#-#-#-#-#-#-#-#-#-# PERFORMANCE CONFIGURATION #-#-#-#-#-#-#-#-#-#-#
 #                                                                     #
 
-<performance 
+<performance
              # netbuffersize: Size of the buffer used to recieve data from clients.
              # The ircd may only read this amount of text in 1 go at any time.
              netbuffersize="10240"
@@ -455,24 +496,24 @@
              softlimit="12800"
 
              # quietbursts: When syncing or splitting from a network, a server
-             # can generate a lof ot connect and quit messages to opers with
+             # can generate a lot of connect and quit messages to opers with
              # +C and +Q snomasks. Setting this to yes squelches those messages,
              # which makes it easier for opers, but degrades the functionality of
              # bots like BOPM during netsplits.
              quietbursts="yes"
 
-             # nouserdns: If enabled, no user DNS lookups will be performed on
+             # nouserdns: If enabled, no DNS lookups will be performed on
              # connecting users. This can save a lot of resources on very busy servers.
              nouserdns="no">
 
 #-#-#-#-#-#-#-#-#-#-#-# SECURITY CONFIGURATION  #-#-#-#-#-#-#-#-#-#-#-#
 #                                                                     #
 
-<security 
+<security
 
           # announceinvites: If this option is set, then invites are announced
-          # to the channel when a user invites another user. If you consider 
-          # this to be unnecessary noise, set this to 'none'. 
+          # to the channel when a user invites another user. If you consider
+          # this to be unnecessary noise, set this to 'none'.
           # To announce to all ops, set this to 'ops' and to announce to all users,
           # set the value to 'all'. The value 'dynamic' will make the messages
           # go to every user who has power of INVITE on the channel. This
@@ -484,15 +525,7 @@
           # as it may break some functionality in popular clients such as mIRC.
           hidemodes="eI"
 
-          # disablehmac: If you are linking your InspIRCd to versions older
-          # than 1.1.6 (NOT RECOMMENDED), then you can specify this option and
-          # set it to yes. 1.1.6 and above support HMAC and challenge-response
-          # for password authentication. These can greatly enhance security of your
-          # server-to-server connections when you are not using SSL.
-          # It is highly recommended to keep this set to no.
-          disablehmac="no"
-
-          # hideulines: If this value is set to yes, U-lined server will
+          # hideulines: If this value is set to yes, U-lined servers will
           # be hidden from non-opers in /links and /map.
           hideulines="no"
 
@@ -508,7 +541,7 @@
 
           # hidebans: If this value is set to yes, when a user is banned ([gkz]lined)
           # only opers will see the ban message when the user is removed
-          # from the server..
+          # from the server.
           hidebans="no"
 
           # hidekills: If defined, replaces who set a /kill with a custom string.
@@ -527,25 +560,31 @@
           # the ircd. This may be set for security reasons or vanity reasons.
           customversion=""
 
-          # operspywhois: If this is set, when a oper /whois 's a user,
+          # operspywhois: If this is set to yes, when a oper /whois 's a user,
           # it will show all channels the user is in including +s and +p
           # channels.
           operspywhois="no"
 
           # runasuser: If this is set, InspIRCd will attempt to setuid
           # to run as this user- allows binding of ports under 1024.
-          # NOT SUPPORTED/NEEDED UNDER WIINDOWS.
+          # NOT SUPPORTED/NEEDED UNDER WINDOWS.
           #runasuser=""
 
           # runasgroup: If this is set, InspIRCd will attempt to set group
-          # to run under this group, which allowsof ports under 1024
-          # NOT SUPPORTED/NEEDED UNDER WIINDOWS.
+          # to run under this group, which allows binding of ports under 1024
+          # NOT SUPPORTED/NEEDED UNDER WINDOWS.
           #runasgroup=""
 
-          # restrictbannedusers: If this is set, InspIRCd will not allow users
+          # restrictbannedusers: If this is set to yes, InspIRCd will not allow users
           # banned on a channel to change nickname or message channels they are
           # banned on.
-         restrictbannedusers="yes"
+          restrictbannedusers="yes"
+
+          # genericoper: Setting this value to yes makes all opers on this server
+          # appear as 'is an IRC operator' in their WHOIS, regardless of their
+          # oper type, however oper types are still used internally. This only
+          # affects the display in WHOIS.
+          genericoper="no"
 
           # userstats: /stats commands that users can run (opers can run all).
           userstats="Pu">
@@ -562,7 +601,7 @@
 #                                                                     #
 # These values should match network-wide otherwise issues will occur. #
 
-<limits 
+<limits
         # maxnick: Maximum length of a nickname.
         maxnick="31"
 
@@ -587,7 +626,7 @@
         # maxgecos: Maximum length of a GECOS (realname).
         maxgecos="128"
 
-        # maxaway: Maximum length of an away messahe.
+        # maxaway: Maximum length of an away message.
         maxaway="200">
 
 
@@ -628,21 +667,21 @@
 # your server.                                                        #
 #                                                                     #
 
-<whowas 
+<whowas
         # groupsize: Maximum entries per nick shown when performing
         # a /whowas nick.
         groupsize="10"
 
         # maxgroups: Maximum number of nickgroups that can be added to
         # the list so that /whowas does not use a lot of resources on
-        # large networks.                                            
+        # large networks.
         maxgroups="100000"
 
         # maxkeep: Maximum time a nick is kept in the whowas list
-        # before being pruned. Time may be specified in seconds, 
+        # before being pruned. Time may be specified in seconds,
         # or in the following format: 1y2w3d4h5m6s. Minimum is
         # 1 hour.
-        maxkeep="3d">                                                
+        maxkeep="3d">
 
 #-#-#-#-#-#-#-#-#-#-#-#-#-#-  BAN OPTIONS  -#-#-#-#-#-#-#-#-#-#-#-#-#-#
 #                                                                     #
@@ -651,41 +690,43 @@
 # Your server.                                                        #
 #                                                                     #
 
-<badip 
+<badip
        # ipmask: IP range to ban. Wildcards and CIDR can be used.
        ipmask="69.69.69.69"
 
        # reason: Reason to display when user is disconnected.
        reason="No porn here thanks.">
 
-<badnick 
-       # nick: Nick to disallow. Wildcards are supported.
-       nick="ChanServ" 
+<badnick
+         # nick: Nick to disallow. Wildcards are supported.
+         nick="ChanServ"
+
+         # reason: Reason to display on /nick.
+         reason="Reserved For Services">
 
-       # reason: Reason to display on /nick.
-       reason="Reserved For Services">
 <badnick nick="NickServ" reason="Reserved For Services">
 <badnick nick="OperServ" reason="Reserved For Services">
 <badnick nick="MemoServ" reason="Reserved For Services">
 
-<badhost 
-       # host: ident@hostname to ban. 
-       # Wildcards and CIDR (if you specify an IP) can be used.
-       host="*@hundredz.n.hundredz.o.1337.kiddies.com" 
+<badhost
+         # host: ident@hostname to ban.
+         # Wildcards and CIDR (if you specify an IP) can be used.
+         host="*@hundredz.n.hundredz.o.1337.kiddies.com"
+
+         # reason: Reason to display when user is disconnected
+         reason="Too many 1337 kiddiots">
 
-       # reason: Reason to display when user is disconnected
-       reason="Too many 1337 kiddiots">
-<badhost host="*@localhost" reason="No irc from localhost!">
+<badhost host="root@*" reason="Don't irc as root!">
 <badhost host="*@172.32.0.0/16" reason="This subnet is bad.">
 
 # exception: Hosts that are exempt from [kgz]lines.
-<exception 
-       # host: ident@hostname to exempt. 
-       # Wildcards and CIDR (if you specify an IP) can be used.
-       host="*@ircop.host.com" 
+<exception
+           # host: ident@hostname to exempt.
+           # Wildcards and CIDR (if you specify an IP) can be used.
+           host="*@ircop.host.com"
 
-       # reason: Reason for exception. Only shown in /stats e
-       reason="Opers hostname">
+           # reason: Reason for exception. Only shown in /stats e
+           reason="Opers hostname">
 
 #-#-#-#-#-#-#-#-#-#-#- INSANE BAN OPTIONS  -#-#-#-#-#-#-#-#-#-#-#-#-#-#
 #                                                                     #
@@ -699,20 +740,20 @@
 # allow any qline.                                                    #
 #                                                                     #
 
-<insane 
-        # hostmasks: Allow bans with insane hostmasks (over-reaching bans)
-        hostmasks="no" 
+<insane
+        # hostmasks: Allow bans with insane hostmasks. (over-reaching bans)
+        hostmasks="no"
 
-        # ipmasks: Allow bans with insane ipmasks (over-reaching bans)
-        ipmasks="no" 
+        # ipmasks: Allow bans with insane ipmasks. (over-reaching bans)
+        ipmasks="no"
 
-        # nickmasks: Allow bans with insane nickmasks (over-reaching bans)
-        nickmasks="no" 
+        # nickmasks: Allow bans with insane nickmasks. (over-reaching bans)
+        nickmasks="no"
 
         # trigger: What percentage of users on the network to trigger
         # specifying an insane ban as. The default is 95.5%, which means
         # if you have a 1000 user network, a ban will not be allowed if it
-        # will be banning 955 or more users. 
+        # will be banning 955 or more users.
         trigger="95.5">
 
 
@@ -730,13 +771,13 @@
 #   |_| \_\___|\__,_|\__,_|   |_| |_| |_|_|___/ |____/|_|\__(_)       #
 #                                                                     #
 # Well done, you've reached the end of the basic configuration, your  #
-# ircd should now start if you want to try it out! (./inspircd start) #                      
+# ircd should now start if you want to try it out! (./inspircd start) #
 #                                                                     #
 # We now suggest you read and edit modules.conf, as modules are what  #
 # provide almost all the features of InspIRCd. :)                     #
 #                                                                     #
 # The default does nothing -- we include it for simplicity for you.   #
-<include file="modules.conf">
+<include file="modules.conf.example">
 
 
 #########################################################################