| 1 | commit f3531e713e37805bb172a5f190adabd7b484c877 |
| 2 | Author: acidvegas <acid.vegas@acid.vegas> |
| 3 | Date: Mon Apr 20 15:14:09 2020 -0400 |
| 4 | |
| 5 | updated to 5.0.4 |
| 6 | --- |
| 7 | doc/conf/unrealircd.remote.conf | 185 ++++++++++++++++++++++++++++++++++++++++ |
| 8 | 1 file changed, 185 insertions(+) |
| 9 | |
| 10 | diff --git a/doc/conf/unrealircd.remote.conf b/doc/conf/unrealircd.remote.conf |
| 11 | new file mode 100644 |
| 12 | index 0000000..e745785 |
| 13 | --- /dev/null |
| 14 | +++ b/doc/conf/unrealircd.remote.conf |
| 15 | @@ -0,0 +1,185 @@ |
| 16 | +admin { ""; } |
| 17 | + |
| 18 | +alias botserv { type services; } |
| 19 | +alias bs { target botserv; type services; } |
| 20 | +alias chanserv { type services; } |
| 21 | +alias cs { target chanserv; type services; } |
| 22 | +alias hostserv { type services; } |
| 23 | +alias hs { target hostserv; type services; } |
| 24 | +alias nickserv { type services; } |
| 25 | +alias ns { target nickserv; type services; } |
| 26 | +alias operserv { type services; } |
| 27 | +alias os { target operserv; type services; } |
| 28 | + |
| 29 | +class clients { pingfreq 120; maxclients 100; sendq 1M; options { nofakelag; } } |
| 30 | +class servers { pingfreq 120; maxclients 10; sendq 1M; connfreq 30; } |
| 31 | + |
| 32 | +allow { ip *; class clients; maxperip 2; } |
| 33 | + |
| 34 | +listen { ip *; port 6667; options { clientsonly; } } |
| 35 | +listen { ip *; port 6697; options { clientsonly; tls; } } |
| 36 | +listen { ip *; port REDACTED; options { serversonly; tls; } } |
| 37 | + |
| 38 | +link irc.supernets.org { |
| 39 | + incoming { mask REDACTED; } |
| 40 | + outgoing { |
| 41 | + bind-ip *; |
| 42 | + hostname REDACTED; |
| 43 | + port REDACTED; |
| 44 | + options { tls; autoconnect; } |
| 45 | + } |
| 46 | + password "REDACTED" { spkifp; } |
| 47 | + class servers; |
| 48 | +} |
| 49 | + |
| 50 | +log "errors.log" { flags { errors; } maxsize 10K; } |
| 51 | + |
| 52 | +tld { mask *@*; motd remote.motd; rules remote.motd; options { remote; } } |
| 53 | + |
| 54 | +ulines { services.supernets.org; } |
| 55 | + |
| 56 | +blacklist dronebl { |
| 57 | + dns { |
| 58 | + name dnsbl.dronebl.org; |
| 59 | + type record; |
| 60 | + reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; } |
| 61 | + } |
| 62 | + action gzline; |
| 63 | + ban-time 1d; |
| 64 | + reason "8,4 E N T E R T H E V O I D "; |
| 65 | +} |
| 66 | + |
| 67 | +blacklist efnetrbl { |
| 68 | + dns { |
| 69 | + name rbl.efnetrbl.org; |
| 70 | + type record; |
| 71 | + reply { 1; 4; 5; } |
| 72 | + } |
| 73 | + action gzline; |
| 74 | + ban-time 1d; |
| 75 | + reason "8,4 E N T E R T H E V O I D "; |
| 76 | +} |
| 77 | + |
| 78 | +blacklist torbl { |
| 79 | + dns { |
| 80 | + name torexit.dan.me.uk; |
| 81 | + type record; |
| 82 | + reply { 100; } |
| 83 | + } |
| 84 | + action gzline; |
| 85 | + ban-time 1d; |
| 86 | + reason "8,4 E N T E R T H E V O I D "; |
| 87 | +} |
| 88 | + |
| 89 | +webirc { mask 107.161.19.53; password "REDACTED"; } # KiwiIRC |
| 90 | +webirc { mask 107.161.19.109; password "REDACTED"; } |
| 91 | +webirc { mask 107.161.31.4; password "REDACTED"; } |
| 92 | + |
| 93 | +webirc { mask 207.192.75.252; password "REDACTED"; } # Mibbit |
| 94 | +webirc { mask 64.62.228.82; password "REDACTED"; } |
| 95 | +webirc { mask 78.129.202.38; password "REDACTED"; } |
| 96 | +webirc { mask 109.169.29.95 ; password "REDACTED"; } |
| 97 | + |
| 98 | +set { |
| 99 | + kline-address "banned@supernets.org"; |
| 100 | + gline-address "banned@supernets.org"; |
| 101 | + modes-on-connect "+ipTx"; |
| 102 | + modes-on-oper "+HIq"; |
| 103 | + snomask-on-oper "+bcFfkGsSo"; |
| 104 | + modes-on-join "+ns"; |
| 105 | + level-on-join "op"; |
| 106 | + restrict-channelmodes "CnLpPs"; |
| 107 | + restrict-commands { |
| 108 | + invite { connect-delay 3600; exempt-identified yes; } |
| 109 | + list { connect-delay 120; exempt-identified yes; } |
| 110 | + private-message { connect-delay 300; exempt-identified yes; } |
| 111 | + private-notice { connect-delay 3600; exempt-identified yes; } |
| 112 | + } |
| 113 | + auto-join "#superbowl"; |
| 114 | + oper-auto-join "#help"; |
| 115 | + static-quit "EMO-QUIT"; |
| 116 | + static-part "EMO-PART"; |
| 117 | + who-limit 100; |
| 118 | + nick-length 20; |
| 119 | + maxchannelsperuser 10; |
| 120 | + channel-command-prefix "`!@$."; |
| 121 | + options { hide-ulines; flat-map; identd-check; } |
| 122 | + network-name "SuperNETs"; |
| 123 | + default-server "irc.supernets.org"; |
| 124 | + services-server "services.supernets.org"; |
| 125 | + sasl-server "services.supernets.org"; |
| 126 | + help-channel "#help"; |
| 127 | + cloak-method ip; |
| 128 | + cloak-keys { |
| 129 | + "REDACTED"; |
| 130 | + "REDACTED"; |
| 131 | + "REDACTED"; |
| 132 | + } |
| 133 | + hiddenhost-prefix "SUPER"; |
| 134 | + plaintext-policy { |
| 135 | + user warn; |
| 136 | + oper deny; |
| 137 | + server deny; |
| 138 | + user-message "4WARNING: You are not using a secure connection with SSL/TLS"; |
| 139 | + oper-message "Network operators must connect using SSL/TLS"; |
| 140 | + } |
| 141 | + outdated-tls-policy { |
| 142 | + user warn; |
| 143 | + oper deny; |
| 144 | + server deny; |
| 145 | + user-message "4WARNING: You are using an outdated SSL/TLS protocol or cipher"; |
| 146 | + oper-message "Network operators must connect using an up-to-date SSL/TLS protocol or cipher"; |
| 147 | + } |
| 148 | + anti-flood { |
| 149 | + away-flood 3:300; |
| 150 | + connect-flood 3:300; |
| 151 | + invite-flood 3:300; |
| 152 | + join-flood 3:300; |
| 153 | + knock-flood 3:300; |
| 154 | + max-concurrent-conversations { users 5; new-user-every 60s; } |
| 155 | + nick-flood 3:300; |
| 156 | + unknown-flood-amount 2048; |
| 157 | + unknown-flood-bantime 1h; |
| 158 | + } |
| 159 | + default-bantime 1d; |
| 160 | + spamfilter { |
| 161 | + ban-time 1d; |
| 162 | + ban-reason "8,4 E N T E R T H E V O I D "; |
| 163 | + except "#anythinggoes"; |
| 164 | + } |
| 165 | + max-targets-per-command { kick 1; part 1; privmsg 1; } |
| 166 | + hide-ban-reason yes; |
| 167 | + reject-message { |
| 168 | + gline "8,4 E N T E R T H E V O I D "; |
| 169 | + kline "8,4 E N T E R T H E V O I D "; |
| 170 | + password-mismatch "8,4 E N T E R T H E V O I D "; |
| 171 | + server-full "8,4 E N T E R T H E V O I D "; |
| 172 | + too-many-connections "8,4 E N T E R T H E V O I D "; |
| 173 | + unauthorized "8,4 E N T E R T H E V O I D "; |
| 174 | + } |
| 175 | + antimixedutf8 { |
| 176 | + score 10; |
| 177 | + ban-action block; |
| 178 | + ban-reason "8,4 E N T E R T H E V O I D "; |
| 179 | + ban-time 1h; |
| 180 | + } |
| 181 | + connthrottle { |
| 182 | + known-users { minimum-reputation-score 24; sasl-bypass yes; } |
| 183 | + new-users { local-throttle 20:60; global-throttle 30:60; } |
| 184 | + disabled-when { reputation-gathering 1w; start-delay 3m; } |
| 185 | + } |
| 186 | + history { |
| 187 | + channel { |
| 188 | + playback-on-join { lines 100; time 1d; } |
| 189 | + max-storage-per-channel { lines 100; time 1d; } |
| 190 | + } |
| 191 | + } |
| 192 | + manual-ban-target ip; |
| 193 | +} |
| 194 | + |
| 195 | +hideserver { |
| 196 | + disable-map yes; |
| 197 | + disable-links yes; |
| 198 | + map-deny-message "Denied"; |
| 199 | + links-deny-message "Denied"; |
| 200 | +} |