←︎ unrealircd :: f3531e7


1
commit f3531e713e37805bb172a5f190adabd7b484c877
2
Author: acidvegas <acid.vegas@acid.vegas>
3
Date:   Mon Apr 20 15:14:09 2020 -0400
4
5
    updated to 5.0.4
6
---
7
 doc/conf/unrealircd.remote.conf | 185 ++++++++++++++++++++++++++++++++++++++++
8
 1 file changed, 185 insertions(+)
9
10
diff --git a/doc/conf/unrealircd.remote.conf b/doc/conf/unrealircd.remote.conf
11
new file mode 100644
12
index 0000000..e745785
13
--- /dev/null
14
+++ b/doc/conf/unrealircd.remote.conf
15
@@ -0,0 +1,185 @@
16
+admin { ""; }
17
+
18
+alias botserv { type services; }
19
+alias bs { target botserv; type services; }
20
+alias chanserv { type services; }
21
+alias cs { target chanserv; type services; }
22
+alias hostserv { type services; }
23
+alias hs { target hostserv; type services; }
24
+alias nickserv { type services; }
25
+alias ns { target nickserv; type services; }
26
+alias operserv { type services; }
27
+alias os { target operserv; type services; }
28
+
29
+class clients { pingfreq 120; maxclients 100; sendq 1M; options { nofakelag; } }
30
+class servers { pingfreq 120; maxclients  10; sendq 1M; connfreq 30;           }
31
+
32
+allow { ip *; class clients; maxperip 2; }
33
+
34
+listen { ip *; port 6667;      options { clientsonly;      } }
35
+listen { ip *; port 6697;      options { clientsonly; tls; } }
36
+listen { ip *; port REDACTED;  options { serversonly; tls; } }
37
+
38
+link irc.supernets.org {
39
+	incoming { mask REDACTED; }
40
+	outgoing {
41
+		bind-ip *;
42
+		hostname REDACTED;
43
+		port REDACTED;
44
+		options { tls; autoconnect; }
45
+	}
46
+	password "REDACTED" { spkifp; }
47
+	class servers;
48
+}
49
+
50
+log "errors.log" { flags { errors; } maxsize 10K; }
51
+
52
+tld { mask *@*; motd remote.motd; rules remote.motd; options { remote; } }
53
+
54
+ulines { services.supernets.org; }
55
+
56
+blacklist dronebl {
57
+	dns {
58
+		name dnsbl.dronebl.org;
59
+		type record;
60
+		reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; }
61
+	}
62
+	action gzline;
63
+	ban-time 1d;
64
+	reason "8,4   E N T E R   T H E   V O I D   ";
65
+}
66
+
67
+blacklist efnetrbl {
68
+	dns {
69
+		name rbl.efnetrbl.org;
70
+		type record;
71
+		reply { 1; 4; 5; }
72
+	}
73
+	action gzline;
74
+	ban-time 1d;
75
+	reason "8,4   E N T E R   T H E   V O I D   ";
76
+}
77
+
78
+blacklist torbl {
79
+	dns {
80
+		name torexit.dan.me.uk;
81
+		type record;
82
+		reply { 100; }
83
+	}
84
+	action gzline;
85
+	ban-time 1d;
86
+	reason "8,4   E N T E R   T H E   V O I D   ";
87
+}
88
+
89
+webirc { mask 107.161.19.53;  password "REDACTED"; } # KiwiIRC
90
+webirc { mask 107.161.19.109; password "REDACTED"; }
91
+webirc { mask 107.161.31.4;   password "REDACTED"; }
92
+
93
+webirc { mask 207.192.75.252; password "REDACTED"; } # Mibbit
94
+webirc { mask 64.62.228.82;   password "REDACTED"; }
95
+webirc { mask 78.129.202.38;  password "REDACTED"; }
96
+webirc { mask 109.169.29.95 ; password "REDACTED"; }
97
+
98
+set {
99
+	kline-address "banned@supernets.org";
100
+	gline-address "banned@supernets.org";
101
+	modes-on-connect "+ipTx";
102
+	modes-on-oper "+HIq";
103
+	snomask-on-oper "+bcFfkGsSo";
104
+	modes-on-join "+ns";
105
+	level-on-join "op";
106
+	restrict-channelmodes "CnLpPs";
107
+	restrict-commands {
108
+		invite          { connect-delay 3600; exempt-identified yes; }
109
+		list            { connect-delay 120;  exempt-identified yes; }
110
+		private-message { connect-delay 300;  exempt-identified yes; }
111
+		private-notice  { connect-delay 3600; exempt-identified yes; }
112
+	}
113
+	auto-join "#superbowl";
114
+	oper-auto-join "#help";
115
+	static-quit "EMO-QUIT";
116
+	static-part "EMO-PART";
117
+	who-limit 100;
118
+	nick-length 20;
119
+	maxchannelsperuser 10;
120
+	channel-command-prefix "`!@$.";
121
+	options { hide-ulines; flat-map; identd-check; }
122
+	network-name "SuperNETs";
123
+	default-server "irc.supernets.org";
124
+	services-server "services.supernets.org";
125
+	sasl-server "services.supernets.org";
126
+	help-channel "#help";
127
+	cloak-method ip;
128
+	cloak-keys {
129
+		"REDACTED";
130
+		"REDACTED";
131
+		"REDACTED";
132
+	}
133
+	hiddenhost-prefix "SUPER";
134
+	plaintext-policy {
135
+		user warn;
136
+		oper deny;
137
+		server deny;
138
+		user-message "4WARNING: You are not using a secure connection with SSL/TLS";
139
+		oper-message "Network operators must connect using SSL/TLS";
140
+	}
141
+	outdated-tls-policy {
142
+		user warn;
143
+		oper deny;
144
+		server deny;
145
+		user-message "4WARNING: You are using an outdated SSL/TLS protocol or cipher";
146
+		oper-message "Network operators must connect using an up-to-date SSL/TLS protocol or cipher";
147
+	}
148
+	anti-flood {
149
+		away-flood 3:300;
150
+		connect-flood 3:300;
151
+		invite-flood 3:300;
152
+		join-flood 3:300;
153
+		knock-flood 3:300;
154
+		max-concurrent-conversations { users 5; new-user-every 60s; }
155
+		nick-flood 3:300;
156
+		unknown-flood-amount 2048;
157
+		unknown-flood-bantime 1h;
158
+	}
159
+	default-bantime 1d;
160
+	spamfilter {
161
+		ban-time 1d;
162
+		ban-reason "8,4   E N T E R   T H E   V O I D   ";
163
+		except "#anythinggoes";
164
+	}
165
+	max-targets-per-command { kick 1; part 1; privmsg 1; }
166
+	hide-ban-reason yes;
167
+	reject-message {
168
+		gline                "8,4   E N T E R   T H E   V O I D   ";
169
+		kline                "8,4   E N T E R   T H E   V O I D   ";
170
+		password-mismatch    "8,4   E N T E R   T H E   V O I D   ";
171
+		server-full          "8,4   E N T E R   T H E   V O I D   ";
172
+		too-many-connections "8,4   E N T E R   T H E   V O I D   ";
173
+		unauthorized         "8,4   E N T E R   T H E   V O I D   ";
174
+	}
175
+	antimixedutf8 {
176
+		score 10;
177
+		ban-action block;
178
+		ban-reason "8,4   E N T E R   T H E   V O I D   ";
179
+		ban-time 1h;
180
+	}
181
+	connthrottle {
182
+		known-users   { minimum-reputation-score 24; sasl-bypass yes;       }
183
+		new-users     { local-throttle 20:60;        global-throttle 30:60; }
184
+		disabled-when { reputation-gathering 1w;     start-delay 3m;        }
185
+	}
186
+	history {
187
+		channel {
188
+			playback-on-join        { lines 100; time 1d; }
189
+			max-storage-per-channel { lines 100; time 1d; }
190
+		}
191
+	}
192
+	manual-ban-target ip;
193
+}
194
+
195
+hideserver {
196
+	disable-map yes;
197
+	disable-links yes;
198
+	map-deny-message "Denied";
199
+	links-deny-message "Denied";
200
+}